diff --git a/modules/openssh.nix b/modules/openssh.nix
index 04caab9..0ef700e 100644
--- a/modules/openssh.nix
+++ b/modules/openssh.nix
@@ -1,11 +1,11 @@
-{...}: {
+{lib, ...}: {
   services.openssh = {
     enable = true;
     settings = {
       KbdInteractiveAuthentication = false;
-      PasswordAuthentication = false;
+      PasswordAuthentication = lib.mkForce false;
       PubkeyAuthentication = true;
-      PermitRootLogin = "no";
+      PermitRootLogin = lib.mkForce "no";
       StreamLocalBindUnlink = "yes";
       GatewayPorts = "clientspecified";
     };