diff --git a/modules/darwin/common/default.nix b/modules/darwin/common/default.nix
index f37c84e..b05b17b 100644
--- a/modules/darwin/common/default.nix
+++ b/modules/darwin/common/default.nix
@@ -51,6 +51,15 @@ in
     htop
   ];
 
+  # srvos
+  services.openssh.authorizedKeysFiles = pkgs.lib.mkForce [ "/etc/ssh/authorized_keys.d/%u" ];
+
+  # srvos
+  environment.etc."ssh/sshd_config.d/darwin.conf".text = ''
+    KbdInteractiveAuthentication no
+    PasswordAuthentication no
+  '';
+
   # works but displays error message during activation
   # https://github.com/LnL7/nix-darwin/issues/359
   # sudo systemsetup -settimezone 'GMT'