diff --git a/modules/server/default.nix b/modules/server/default.nix
index 3d96ffb3..03b882c9 100644
--- a/modules/server/default.nix
+++ b/modules/server/default.nix
@@ -12,7 +12,7 @@ in
   config = mkIf cfg.enable {
     services.openssh = {
       enable = true;
-      permitRootLogin = "no";
+      permitRootLogin = lib.mkForce "prohibit-password";
       passwordAuthentication = true;
       openFirewall = true;
     };