diff --git a/hosts/FredOS-Mediaserver.nix b/hosts/FredOS-Mediaserver.nix
index 6aef254..f52a2cb 100644
--- a/hosts/FredOS-Mediaserver.nix
+++ b/hosts/FredOS-Mediaserver.nix
@@ -77,11 +77,16 @@
   };
 
   # Open firewall for web traffic
-  networking.firewall.allowedTCPPorts = [ 80 443 81 ];  # 81 is NPM admin interface
+  networking.firewall.allowedTCPPorts = [ 80 443 81 22 ];  # 81 is NPM admin interface
 
   # Basic networking
   networking.useDHCP = lib.mkDefault true;
 
+  services.openssh = {
+    enable = true;
+    settings.PermitRootLogin = "no";
+  };
+
   # Boot loader
   boot.loader.grub.enable = true;
   boot.loader.grub.device = "/dev/sdc";