diff --git a/etc/ssh/sshd_config.d/anoncvs.conf b/etc/ssh/sshd_config.d/anoncvs.conf
index 98f2c624..be68f108 100644
--- a/etc/ssh/sshd_config.d/anoncvs.conf
+++ b/etc/ssh/sshd_config.d/anoncvs.conf
@@ -1,6 +1,8 @@
 # Version Control System accounts musn't have X11Forwarding, TCP Forwarding
 # or TTY. The anoncvs is usually a comment in stock sshd_config
 Match User anoncvs,git,gitea
+	PasswordAuthentication no
+	AuthenticationMethods publickey
 	X11Forwarding no
 	AllowTcpForwarding no
 	PermitTTY no