diff --git a/common.nix b/common.nix
index 7db4c12..74cd1d0 100644
--- a/common.nix
+++ b/common.nix
@@ -237,7 +237,12 @@
   };
 
   # Enable the OpenSSH daemon.
-  services.openssh.enable = true;
+  services.openssh = {
+    enable = true;
+    ports = [2201];
+    settings.PasswordAuthentication = false;
+    settings.PermitRootLogin = "prohibit-password";
+  };
 
   # enable manpages documentation
   documentation = {