diff --git a/.config/ssh/sshd_config.d/20-deny_root.conf b/.config/ssh/sshd_config.d/20-deny_root.conf
new file mode 100644
index 0000000..7ff52c7
--- /dev/null
+++ b/.config/ssh/sshd_config.d/20-deny_root.conf
@@ -0,0 +1 @@
+PermitRootLogin no
diff --git a/.config/ssh/sshd_config.d/20-force_publickey_auth.conf b/.config/ssh/sshd_config.d/20-force_publickey_auth.conf
new file mode 100644
index 0000000..51a3763
--- /dev/null
+++ b/.config/ssh/sshd_config.d/20-force_publickey_auth.conf
@@ -0,0 +1,2 @@
+PasswordAuthentication no
+AuthenticationMethods publickey