diff --git a/modules/hosts/nixos.nix b/modules/hosts/nixos.nix
index 9f00114..7d92930 100644
--- a/modules/hosts/nixos.nix
+++ b/modules/hosts/nixos.nix
@@ -48,6 +48,14 @@ flake.nixosModules.nixos-host = {pkgs, ...}: {
     pulse.enable = true;
   };
 
+  # SSH
+  services.openssh = {
+    enable = true;
+    settings = {
+      PermitRootLogin = "no";
+    };
+  };
+
   # User account
   users.users.${config.username} = {
     isNormalUser = true;