diff --git a/applications/ldap_client.nix b/applications/ldap_client.nix
index 1073834..5d81926 100644
--- a/applications/ldap_client.nix
+++ b/applications/ldap_client.nix
@@ -63,7 +63,7 @@
 
     services.openssh = {
       # only allow ssh keys
-      passwordAuthentication = false;
+      settings.PasswordAuthentication = false;
 
       # tell users where tehy cna setup their ssh key
       banner = ''
diff --git a/flake.lock b/flake.lock
index 49dcf65..b6a960e 100644
--- a/flake.lock
+++ b/flake.lock
@@ -171,16 +171,16 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1684398685,
-        "narHash": "sha256-TRE62m91iZ5ArVMgA+uj22Yda8JoQuuhc9uwZ+NoX+0=",
+        "lastModified": 1686921029,
+        "narHash": "sha256-J1bX9plPCFhTSh6E3TWn9XSxggBh/zDD4xigyaIQBy8=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "628d4bb6e9f4f0c30cfd9b23d3c1cdcec9d3cb5c",
+        "rev": "c7ff1b9b95620ce8728c0d7bd501c458e6da9e04",
         "type": "github"
       },
       "original": {
         "id": "nixpkgs",
-        "ref": "nixos-22.11",
+        "ref": "nixos-23.05",
         "type": "indirect"
       }
     },
diff --git a/flake.nix b/flake.nix
index b3c4589..4a59aa8 100644
--- a/flake.nix
+++ b/flake.nix
@@ -4,7 +4,7 @@
 
   inputs = {
     # gonna start off with a fairly modern base
-    nixpkgs.url = "nixpkgs/nixos-22.11";
+    nixpkgs.url = "nixpkgs/nixos-23.05";
 
     # utility stuff
     flake-utils.url = "github:numtide/flake-utils";
diff --git a/machines/_base.nix b/machines/_base.nix
index 4c1c738..8280e89 100644
--- a/machines/_base.nix
+++ b/machines/_base.nix
@@ -21,7 +21,7 @@
 
   services.openssh = {
     enable = true;
-    permitRootLogin = "prohibit-password";
+    settings.PermitRootLogin = "prohibit-password";
   };
 
   users.users.root = {