diff --git a/etc/ssh/sshd_config.d/10-custom.conf b/etc/ssh/sshd_config.d/10-custom.conf
index 612614a..ccae084 100644
--- a/etc/ssh/sshd_config.d/10-custom.conf
+++ b/etc/ssh/sshd_config.d/10-custom.conf
@@ -7,11 +7,13 @@ Ciphers aes256-gcm@openssh.com
 MACs -*
 
 # Security hardening
+AuthenticationMethods publickey
 AuthorizedKeysFile .ssh/authorized_keys
 Compression no
 DisableForwarding yes
 LoginGraceTime 15s
 MaxAuthTries 1
+PermitUserEnvironment no
 PermitUserRC no
 StrictModes yes
 UseDNS no