diff --git a/system/default.nix b/system/default.nix
index fa7b2c5..5ed0dcc 100644
--- a/system/default.nix
+++ b/system/default.nix
@@ -78,8 +78,8 @@ in
 
     security.sudo-rs.enable = lib.mkDefault true;
 
-    services.openssh = lib.mkDefault {
-      enable = true;
+    services.openssh = {
+      enable = lib.mkDefault true;
 
       # only accept key authentication, for security
       settings.PasswordAuthentication = false;