diff --git a/nixops/desktop.nix b/nixops/desktop.nix
index b9e50407..a7144b64 100644
--- a/nixops/desktop.nix
+++ b/nixops/desktop.nix
@@ -82,7 +82,7 @@ in
   };
 
   services.openssh.enable = true;
-  services.openssh.passwordAuthentication = false;
+  services.openssh.settings.PasswordAuthentication = false;
   services.openssh.extraConfig =
     ''
     StreamLocalBindUnlink yes
diff --git a/nixops/rpi.nix b/nixops/rpi.nix
index 18d84482..0e11559b 100644
--- a/nixops/rpi.nix
+++ b/nixops/rpi.nix
@@ -24,8 +24,8 @@ in
   };
 
   services.openssh.enable = true;
-  services.openssh.passwordAuthentication = false;
-  services.openssh.gatewayPorts = "clientspecified";
+  services.openssh.settings.PasswordAuthentication = false;
+  services.openssh.settings.GatewayPorts = "clientspecified";
   services.openssh.extraConfig =
     ''
     StreamLocalBindUnlink yes