diff --git a/modules/core/services.nix b/modules/core/services.nix
index 61ba6ea0..ebe3cf70 100644
--- a/modules/core/services.nix
+++ b/modules/core/services.nix
@@ -4,7 +4,8 @@
   # For rage encryption, all hosts need a ssh key pair
   services.openssh = {
     enable = true;
-    openFirewall = lib.mkDefault false;
+    openFirewall = lib.mkDefault true;
+    passwordAuthentication = false;
   };
 
   # Service that makes Out of Memory Killer more effective