diff --git a/sw-kiosk.nix b/sw-kiosk.nix
index 68be3c3..b6e36fc 100644
--- a/sw-kiosk.nix
+++ b/sw-kiosk.nix
@@ -80,6 +80,14 @@
       "/run/current-system/sw/share/gsettings-schemas/${pkgs.gsettings-desktop-schemas.name}/glib-2.0/schemas";
   };
 
+  services.udev.extraRules = ''
+    ACTION=="add|change", KERNEL=="event*", ATTRS{name}=="Video Bus", ENV{ID_INPUT_KEYBOARD}="0"
+    ACTION=="add|change", KERNEL=="event*", ATTRS{name}=="Power Button", ENV{ID_INPUT_KEYBOARD}="0"
+    ACTION=="add|change", KERNEL=="event*", ATTRS{name}=="Intel HID events", ENV{ID_INPUT_KEYBOARD}="0"
+    ACTION=="add|change", KERNEL=="event*", ATTRS{name}=="Intel HID 5 button array", ENV{ID_INPUT_KEYBOARD}="0"
+    ACTION=="add|change", KERNEL=="event*", ATTRS{name}=="AT Translated Set 2 keyboard", ENV{ID_INPUT_KEYBOARD}="0"
+  '';
+
   systemd.user.services."force-osk" = {
     description = "Force-enable GNOME OSK after session init";
     wantedBy = [ "graphical-session.target" ];