diff --git a/modules/server/default.nix b/modules/server/default.nix
index 4d69a0c8..98dffbd3 100644
--- a/modules/server/default.nix
+++ b/modules/server/default.nix
@@ -12,12 +12,12 @@ in {
     services.openssh = {
       enable = true;
       ports = [ 69 ];
+      openFirewall = true;
       settings = {
         # disable this NEVER enable it
         PermitRootLogin = "no";
         # its so easy to use keys your grandmother could use it
         PasswordAuthentication = false;
-        openFirewall = true;
       };
     };