diff --git a/modules/system/ssh/default.nix b/modules/system/ssh/default.nix
index 50ab26f..541e263 100644
--- a/modules/system/ssh/default.nix
+++ b/modules/system/ssh/default.nix
@@ -1,9 +1,11 @@
-{ pkgs, config, lib, ... }:
-
-let
-  cfg = config.system.ssh;
-in
 {
+  pkgs,
+  config,
+  lib,
+  ...
+}: let
+  cfg = config.system.ssh;
+in {
   options.system.ssh = {
     enable = lib.mkEnableOption "enables ssh";
   };
@@ -14,11 +16,11 @@ in
       enable = true;
       settings = {
         PasswordAuthentication = false;
-        PermitRootLogin = "no";
+        PermitRootLogin = "prohibit-password";
         X11Forwarding = false;
       };
     };
     # open firewall
-    networking.firewall.allowedTCPPorts = [ 22 ];
+    networking.firewall.allowedTCPPorts = [22];
   };
 }