diff --git a/os-mods/common/default.nix b/os-mods/common/default.nix
index a79b49a..61eefa1 100644
--- a/os-mods/common/default.nix
+++ b/os-mods/common/default.nix
@@ -159,6 +159,11 @@ in
       # enableSSHSupport = true; # breaks gitea foo
       pinentryPackage = lib.mkForce pkgs.pinentry-qt;
     };
+    ssh = {
+      kexAlgorithms = [
+        "sntrup761x25519-sha512@openssh.com"
+      ];
+    };
   };
 
   services = {
@@ -175,6 +180,9 @@ in
         PasswordAuthentication = false;
         KbdInteractiveAuthentication = false;
         PubKeyAuthentication = true;
+        KexAlgorithms = [
+          "sntrup761x25519-sha512@openssh.com"
+        ];
       };
       extraConfig = ''
         AllowTcpForwarding yes