diff --git a/profiles/core/default.nix b/profiles/core/default.nix
index 6c04d580..31d765e0 100644
--- a/profiles/core/default.nix
+++ b/profiles/core/default.nix
@@ -109,6 +109,12 @@ in
       '';
     };
 
+    # For rage encryption, all hosts need a ssh key pair
+    services.openssh = {
+      enable = true;
+      openFirewall = lib.mkDefault false;
+    };
+
     # Service that makes Out of Memory Killer more effective
     services.earlyoom.enable = true;