diff --git a/machine-confs/helium.nix b/machine-confs/helium.nix
index 31fcf26..470a029 100644
--- a/machine-confs/helium.nix
+++ b/machine-confs/helium.nix
@@ -54,7 +54,7 @@
   };
   systemd.services.clatd.wants = [ "wg-quick-wg0.service" ];
 
-  services.openssh.enable = pkgs.lib.mkForce false;
+  services.openssh.openFirewall = false;
   services.fail2ban.enable = pkgs.lib.mkForce false;
 
   imports = [
diff --git a/machine-confs/lithium.nix b/machine-confs/lithium.nix
index 1502154..1061d7d 100644
--- a/machine-confs/lithium.nix
+++ b/machine-confs/lithium.nix
@@ -36,7 +36,7 @@
   };
   systemd.services.clatd.wants = [ "wg-quick-wg0.service" ];
 
-  services.openssh.enable = pkgs.lib.mkForce false;
+  services.openssh.openFirewall = false;
   services.fail2ban.enable = pkgs.lib.mkForce false;
 
   imports = [