diff --git a/modules/openssh.nix b/modules/openssh.nix
index 48a7fbc..04caab9 100644
--- a/modules/openssh.nix
+++ b/modules/openssh.nix
@@ -5,7 +5,7 @@
       KbdInteractiveAuthentication = false;
       PasswordAuthentication = false;
       PubkeyAuthentication = true;
-      PermitRootLogin = "yes";
+      PermitRootLogin = "no";
       StreamLocalBindUnlink = "yes";
       GatewayPorts = "clientspecified";
     };