diff --git a/home/programs/default.nix b/home/programs/default.nix
index 0b7c46cc..7752e63e 100644
--- a/home/programs/default.nix
+++ b/home/programs/default.nix
@@ -90,6 +90,13 @@
       nerd-fonts.fira-code
       nerd-fonts.hasklug
       nerd-fonts.symbols-only
+      noto-fonts
+      noto-fonts-cjk-sans
+      noto-fonts-color-emoji
+      liberation_ttf
+      fira-code
+      fira-code-symbols
+      mplus-outline-fonts.githubRelease
     ]
     ++ lib.optionals device.isLinux []
     ++ lib.optionals device.isDarwin [];
diff --git a/nixos/ryu/configuration.nix b/nixos/ryu/configuration.nix
index 648e5382..5088ce55 100644
--- a/nixos/ryu/configuration.nix
+++ b/nixos/ryu/configuration.nix
@@ -169,8 +169,6 @@
     };
   };
 
-  services.openssh.enable = true;
-
   networking = {
     interfaces.eno1.wakeOnLan = {
       policy = ["magic"];
diff --git a/nixos/ryu/services/default.nix b/nixos/ryu/services/default.nix
index 47e7d4ef..0721ac8b 100644
--- a/nixos/ryu/services/default.nix
+++ b/nixos/ryu/services/default.nix
@@ -22,5 +22,6 @@
     ./handoff.nix
     ./gstreamer.nix
     ./dualsense.nix
+    ./openssh.nix
   ];
 }
diff --git a/nixos/ryu/services/openssh.nix b/nixos/ryu/services/openssh.nix
new file mode 100644
index 00000000..80f73359
--- /dev/null
+++ b/nixos/ryu/services/openssh.nix
@@ -0,0 +1,7 @@
+{...}: {
+  services.openssh = {
+    enable = true;
+    settings.PasswordAuthentication = false;
+    settings.PermitRootLogin = "prohibit-password";
+  };
+}