diff --git a/images/00-base/Dockerfile b/images/00-base/Dockerfile
index 12aac095..db7fc6c7 100644
--- a/images/00-base/Dockerfile
+++ b/images/00-base/Dockerfile
@@ -37,7 +37,6 @@ RUN apk --no-cache add \
     procps \
     qemu-guest-agent \
     rng-tools \
-    rng-tools-openrc \
     rsync \
     strace \
     sudo \
diff --git a/overlay/etc/ssh/sshd_config b/overlay/etc/ssh/sshd_config
new file mode 100644
index 00000000..73cb2756
--- /dev/null
+++ b/overlay/etc/ssh/sshd_config
@@ -0,0 +1,9 @@
+# See https://man.openbsd.org/sshd_config for
+# details on these and other parameters.
+
+AllowTcpForwarding      no
+GatewayPorts            no
+PasswordAuthentication  no
+X11Forwarding           no
+
+Subsystem   sftp    internal-sftp