diff --git a/modules/system/security.nix b/modules/system/security.nix
index a0399f0..8b48413 100644
--- a/modules/system/security.nix
+++ b/modules/system/security.nix
@@ -8,9 +8,11 @@
 
   services.openssh = {
     enable = true;
-    permitRootLogin = "no";
-    passwordAuthentication = false;
-    forwardX11 = true;
+    settings = {
+      PermitRootLogin = "no";
+      PasswordAuthentication = false;
+      X11Forwarding = true;
+    };
 
     hostKeys = [
       {