diff --git a/profiles/openssh.nix b/profiles/openssh.nix
index d437cb2..9a2389b 100644
--- a/profiles/openssh.nix
+++ b/profiles/openssh.nix
@@ -7,15 +7,17 @@
 }: {
   services.openssh = {
     enable = true; # Enable the OpenSSH daemon.
-    permitRootLogin = "prohibit-password";
-    kbdInteractiveAuthentication = false;
-    passwordAuthentication = false;
-    openFirewall = true;
     hostKeys = [
       {
         path = "/etc/ssh/ssh_host_ed25519_key";
         type = "ed25519";
       }
     ];
+    openFirewall = true;
+    settings = {
+      KbdInteractiveAuthentication = false;
+      PasswordAuthentication = false;
+      PermitRootLogin = "prohibit-password";
+    };
   };
 }