diff --git a/hosts/lab/default.nix b/hosts/lab/default.nix
index f710f6e..6e0a22c 100644
--- a/hosts/lab/default.nix
+++ b/hosts/lab/default.nix
@@ -11,7 +11,7 @@
     enable = true;
     settings = {
       PasswordAuthentication = false;
-      PermitRootLogin = "yes";
+      PermitRootLogin = "no";
     };
   };