diff --git a/modules/common/services.nix b/modules/common/services.nix
index dd3272b..fcaad2f 100644
--- a/modules/common/services.nix
+++ b/modules/common/services.nix
@@ -1,6 +1,12 @@
 { config, lib, pkgs, ... }:
 
 {
-  services.openssh.enable = true;
-  services.openssh.permitRootLogin = "no";
+  services.openssh = {
+    enable = true;
+    permitRootLogin = "no";
+    passwordAuthentication = false;
+    startWhenNeeded = true;
+  };
+
+  services.fail2ban.enable = true;
 }