diff --git a/common.nix b/common.nix
index 6749e01..36bd208 100644
--- a/common.nix
+++ b/common.nix
@@ -79,8 +79,8 @@ all: {
     # Allow ssh
     enable = lib.mkDefault true;
     # lol no
-    permitRootLogin = lib.mkDefault "no";
-    passwordAuthentication = lib.mkDefault false;
+    settings.PermitRootLogin = lib.mkDefault "no";
+    settings.PasswordAuthentication = lib.mkDefault false;
     # allow reverse ssh port shit to be public sometimes
     gatewayPorts = lib.mkDefault "clientspecified";
     extraConfig = ''