diff --git a/profiles/ssh/default.nix b/profiles/ssh/default.nix
index 328d5e2..6b29e63 100644
--- a/profiles/ssh/default.nix
+++ b/profiles/ssh/default.nix
@@ -4,6 +4,8 @@
     forwardX11 = true;
     permitRootLogin = "no";
     startWhenNeeded = true;
+    openFirewall = true;
+    passwordAuthentication = false;
   };
   nix.sshServe.enable = true;
   nix.sshServe.keys = [