diff --git a/profiles/openssh.nix b/profiles/openssh.nix
index d437cb2..0c3d7bd 100644
--- a/profiles/openssh.nix
+++ b/profiles/openssh.nix
@@ -7,9 +7,6 @@
 }: {
   services.openssh = {
     enable = true; # Enable the OpenSSH daemon.
-    permitRootLogin = "prohibit-password";
-    kbdInteractiveAuthentication = false;
-    passwordAuthentication = false;
     openFirewall = true;
     hostKeys = [
       {
@@ -17,5 +14,10 @@
         type = "ed25519";
       }
     ];
+    settings = {
+      KbdInteractiveAuthentication = false;
+      PasswordAuthentication = false;
+      PermitRootLogin = "prohibit-password";
+    };
   };
 }