diff --git a/hosts/sombrero/modules/ssh/default.nix b/hosts/sombrero/modules/ssh/default.nix
index d5a53ec..0d0ac95 100644
--- a/hosts/sombrero/modules/ssh/default.nix
+++ b/hosts/sombrero/modules/ssh/default.nix
@@ -45,6 +45,11 @@ in
           type = "ed25519";
         }];
 
+        settings = {
+          PasswordAuthentication = false;
+          KbdInteractiveAuthentication = false;
+        };
+
         authorizedKeysCommand = "/etc/ssh/authorized_keys_command";
         authorizedKeysCommandUser = "root";
       };