diff --git a/system-config/services/containers/gitea/default.nix b/system-config/services/containers/gitea/default.nix
index 2ee1198..317d2c4 100644
--- a/system-config/services/containers/gitea/default.nix
+++ b/system-config/services/containers/gitea/default.nix
@@ -104,7 +104,14 @@
                     };
 
                 };
-                services.openssh.enable = true;
+                services.openssh = {
+                    enable = true;
+                    settings = {
+                        PermitRootLogin = lib.mkForce "no";
+                        PasswordAuthentication = false;
+                        KbdInteractiveAuthentication = false;
+                    };
+                };
 
                 networking.firewall.allowedTCPPorts = [ 22 3000 ];