diff --git a/infra/common/users.nix b/infra/common/users.nix
index 098994d..456ba11 100644
--- a/infra/common/users.nix
+++ b/infra/common/users.nix
@@ -33,7 +33,7 @@
 
   ## FIXME: Remove direct root authentication once NixOps4 supports users with
   ## password-less sudo.
-  users.root.openssh.authorizedKeys.keys = [
+  users.users.root.openssh.authorizedKeys.keys = [
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEElREJN0AC7lbp+5X204pQ5r030IbgCllsIxyU3iiKY"
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJg5TlS1NGCRZwMjDgBkXeFUXqooqRlM8fJdBAQ4buPg"
   ];