diff --git a/deploy/nixos/configuration.nix b/deploy/nixos/configuration.nix
index 678f658..193a73a 100644
--- a/deploy/nixos/configuration.nix
+++ b/deploy/nixos/configuration.nix
@@ -134,10 +134,15 @@
     enable = true;
     settings = {
       PasswordAuthentication = false;
-      PermitRootLogin = "no";
+      PermitRootLogin = "prohibit-password";
     };
   };
 
+  # Root SSH key access
+  users.users.root.openssh.authorizedKeys.keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIES8I43AgXppATvtBqnUycakMMs68T2J52cTwNt6qPak padreug@gizmo"
+  ];
+
   # Auto-updates (optional - disabled by default for stability)
   # system.autoUpgrade.enable = false;