diff --git a/system-config/sshd_config.d/99-disable-password-auth.conf b/system-config/sshd_config.d/99-disable-password-auth.conf
new file mode 100644
index 0000000..7af401a
--- /dev/null
+++ b/system-config/sshd_config.d/99-disable-password-auth.conf
@@ -0,0 +1,4 @@
+PasswordAuthentication no
+ChallengeResponseAuthentication no
+StreamLocalBindUnlink yes
+