diff --git a/birne/configuration.nix b/birne/configuration.nix
index f6df96f..746c4db 100644
--- a/birne/configuration.nix
+++ b/birne/configuration.nix
@@ -52,6 +52,7 @@
     shell = pkgs.fish;
     password = "print";
   };
+  services.openssh.extraConfig = "DenyUsers	print";
 
   services.xserver.displayManager.autoLogin = {
     enable = true;