diff --git a/config/default.nix b/config/default.nix
index 3a161b17..9c1c32fb 100644
--- a/config/default.nix
+++ b/config/default.nix
@@ -141,10 +141,10 @@ lib.mkMerge [
         # never leave openssh in a state that you cannot log in
         "d /etc 0755 root root -"
         "d /etc/ssh 0755 root root -"
-        "d /etc/ssh/ssh_host_ed25519_key 0700 root root -"
-        "d /etc/ssh/ssh_host_ed25519_key.pub 0744 root root -"
-        "d /etc/ssh/ssh_host_rsa_key 0700 root root -"
-        "d /etc/ssh/ssh_host_rsa_key.pub 0744 root root -"
+        "f /etc/ssh/ssh_host_ed25519_key 0700 root root -"
+        "f /etc/ssh/ssh_host_ed25519_key.pub 0744 root root -"
+        "f /etc/ssh/ssh_host_rsa_key 0700 root root -"
+        "f /etc/ssh/ssh_host_rsa_key.pub 0744 root root -"
       ];
 
       # Reboot on hang