diff --git a/roles/openssh.nix b/roles/openssh.nix
index 9d214fb..78a25a2 100644
--- a/roles/openssh.nix
+++ b/roles/openssh.nix
@@ -6,7 +6,7 @@
 
   services.openssh = {
     enable = true;          # Enable the OpenSSH daemon.
-    permitRootLogin = "without-password";
+    permitRootLogin = "prohibit-password";
     challengeResponseAuthentication = false;
     passwordAuthentication = false;
     openFirewall = true;