diff --git a/systems/common/global/ssh.nix b/systems/common/global/ssh.nix
index 40a7cf5..3b3ae8f 100644
--- a/systems/common/global/ssh.nix
+++ b/systems/common/global/ssh.nix
@@ -33,7 +33,7 @@
         MaxSessions = lib.mkDefault 2;
         PasswordAuthentication = false;
         PermitEmptyPasswords = "no";
-        PermitRootLogin = lib.mkDefault "no";
+        PermitRootLogin = lib.mkForce "no";
         TcpKeepAlive = "no";
         X11Forwarding = lib.mkDefault false;
         KexAlgorithms = [