diff --git a/profiles/ssh/default.nix b/profiles/ssh/default.nix
new file mode 100644
index 00000000..da8645c7
--- /dev/null
+++ b/profiles/ssh/default.nix
@@ -0,0 +1,9 @@
+{ ... }: {
+  services.openssh = {
+    enable = true;
+    challengeResponseAuthentication = false;
+    passwordAuthentication = false;
+    forwardX11 = true;
+  };
+}
+