diff --git a/nixos/roles/default.nix b/nixos/roles/default.nix
index 2bcf4dc..7696270 100644
--- a/nixos/roles/default.nix
+++ b/nixos/roles/default.nix
@@ -23,6 +23,7 @@ networking = {
 
 users = {
   mutableUsers = false;
+  users.root.hashedPassword = "!";
 };
 
 sops.age.sshKeyPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];