diff --git a/modules/openssh.nix b/modules/openssh.nix
index 0ef700e..749d2ec 100644
--- a/modules/openssh.nix
+++ b/modules/openssh.nix
@@ -4,7 +4,7 @@
     settings = {
       KbdInteractiveAuthentication = false;
       PasswordAuthentication = lib.mkForce false;
-      PubkeyAuthentication = true;
+      PubkeyAuthentication = lib.mkForce true;
       PermitRootLogin = lib.mkForce "no";
       StreamLocalBindUnlink = "yes";
       GatewayPorts = "clientspecified";