diff --git a/nixos/baseline.nix b/nixos/baseline.nix
index e994de8..61fafcf 100644
--- a/nixos/baseline.nix
+++ b/nixos/baseline.nix
@@ -20,6 +20,7 @@ in
   ];
 
   services.amazon-ssm-agent.enable = true;
+  services.openssh.enable = lib.mkForce false;
 
   boot.supportedFilesystems = [ "zfs" ];
   boot.zfs.extraPools = [ nixPool ];