diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index 050b95e..e8169f7 100644
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -114,6 +114,9 @@ lookup_options:
   networking::routes:
     merge:
       strategy: deep
+  ssh::server::options:
+    merge:
+      strategy: deep
 
 facts_path: '/opt/puppetlabs/facter/facts.d'
 
diff --git a/hieradata/roles/infra/proxmox.yaml b/hieradata/roles/infra/proxmox.yaml
index 05e6a9b..c40b6e4 100644
--- a/hieradata/roles/infra/proxmox.yaml
+++ b/hieradata/roles/infra/proxmox.yaml
@@ -8,3 +8,7 @@ sudo::configs:
 
 hiera_exclude:
   - networking
+
+# proxmox tools use root to authenticate against each other
+ssh::server::options:
+  PermitRootLogin: yes