diff --git a/base/services/openssh.nix b/base/services/openssh.nix
index ec34862..d0a9aa8 100644
--- a/base/services/openssh.nix
+++ b/base/services/openssh.nix
@@ -2,6 +2,7 @@
 {
   services.openssh = {
     enable = true;
+    startWhenNeeded = true;
     extraConfig = ''
       PubkeyAcceptedAlgorithms=+ssh-rsa
       Match Group wheel