diff --git a/base/programs.nix b/base/programs.nix
index 3c5d4e4..b9406bd 100644
--- a/base/programs.nix
+++ b/base/programs.nix
@@ -9,11 +9,11 @@
   };
 
   services.openssh = {
-    passwordAuthentication = false;
-    permitRootLogin = "no";
-    extraConfig = ''
-      StreamLocalBindUnlink yes
-    '';
+    settings = {
+      PasswordAuthentication = false;
+      PermitRootLogin = "no";
+      StreamLocalBindUnlink = true;
+    };
   };
 
   environment.systemPackages = builtins.attrValues {