diff --git a/roles/common/templates/openssh/sshd_config.j2 b/roles/common/templates/openssh/sshd_config.j2
index 6bfbf96..71c8263 100644
--- a/roles/common/templates/openssh/sshd_config.j2
+++ b/roles/common/templates/openssh/sshd_config.j2
@@ -19,4 +19,6 @@ Subsystem	sftp	internal-sftp
 Match Group {{ backup_group }}
   X11Forwarding no
   AllowTcpForwarding no
-  ForceCommand rrsync {{ backup_chroot_dir | quote }}
\ No newline at end of file
+  AllowAgentForwarding no
+  PermitTTY no
+  ForceCommand rrsync -ro {{ backup_chroot_dir | quote }}
\ No newline at end of file