diff --git a/hosts/zaphod/services/modules.nix b/hosts/zaphod/services/modules.nix
index 213747e..6919633 100644
--- a/hosts/zaphod/services/modules.nix
+++ b/hosts/zaphod/services/modules.nix
@@ -12,6 +12,7 @@
     ./pcscd.nix
     ./pipewire.nix
     ./spotifyd.nix
+    ./ssh.nix
     ./tailscale.nix
     ./unbound.nix
     # ./yubikey-agent.nix
diff --git a/hosts/zaphod/services/ssh.nix b/hosts/zaphod/services/ssh.nix
new file mode 100644
index 0000000..5fba2e5
--- /dev/null
+++ b/hosts/zaphod/services/ssh.nix
@@ -0,0 +1,6 @@
+{
+  # services.openssh = {
+  #   enable = true;
+  #   permitRootLogin = "prohibit-password";
+  # };
+}