diff --git a/hosts/hyrule/default.nix b/hosts/hyrule/default.nix
index e8fcd7a..6fc1993 100755
--- a/hosts/hyrule/default.nix
+++ b/hosts/hyrule/default.nix
@@ -102,15 +102,6 @@ in {
           wishlist
         ];
       };
-
-      # user for friends to ssh into
-      friends = {
-        isNormalUser = true;
-        shell = pkgs.bash;
-        home = "/home/friends"; # TEMP: remove and replace with home-manager
-        packages = with pkgs; [
-        ];
-      };
     };
   };
 
@@ -196,9 +187,9 @@ in {
       enable = true;
       ports = [22];
       settings = {
-        PasswordAuthentication = true;
+        PasswordAuthentication = false;
         PermitRootLogin = "no";
-        AllowUsers = ["ae" "subspace"]; # allow all users by default
+        AllowUsers = ["ae" "subspace"]; # DO NOT ALLOW ALL
         UseDns = true;
         X11Forwarding = false;
       };