diff --git a/modules/utils/lxc-standard.nix b/modules/utils/lxc-standard.nix
index 9df7302..4351539 100644
--- a/modules/utils/lxc-standard.nix
+++ b/modules/utils/lxc-standard.nix
@@ -12,6 +12,8 @@ in
     # Enable SSH
     services = {
       openssh.enable = true;
+      # Disable password root access. Necessary for Colmena
+      openssh.permitRootLogin = "prohibit-password";
     };
 
     my.utils.serverNodeUsers.enable = true;