diff --git a/config/default.nix b/config/default.nix
index ebf12aca..5224ee42 100644
--- a/config/default.nix
+++ b/config/default.nix
@@ -195,16 +195,6 @@
 
     services.nix-daemon.serviceConfig.KillMode = "control-group";
 
-    tmpfiles.rules = [
-      # never leave openssh in a state that you cannot log in
-      "d /etc 0755 root root -"
-      "d /etc/ssh 0755 root root -"
-      "f /etc/ssh/ssh_host_ed25519_key 0700 root root -"
-      "f /etc/ssh/ssh_host_ed25519_key.pub 0744 root root -"
-      "f /etc/ssh/ssh_host_rsa_key 0700 root root -"
-      "f /etc/ssh/ssh_host_rsa_key.pub 0744 root root -"
-    ];
-
     # Reboot on hang
     watchdog = lib.mkIf (!config.boot.isContainer) {
       runtimeTime = "15s";