diff --git a/hosts/wormhole0.nix b/hosts/wormhole0.nix
index 1d08c31..12121ad 100644
--- a/hosts/wormhole0.nix
+++ b/hosts/wormhole0.nix
@@ -14,4 +14,5 @@
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGb+mT3UyDIKow36CVQJlJCyJqJfmReWFWAS2ZVpaB6p";
     key-path = "/state/master-key/key";
   };
+  hardened = true;
 }