From c4bd8d3fa15d7af8a47e287db0526536e36b973f Mon Sep 17 00:00:00 2001
From: Cilly Leang <mini@cilly.moe>
Date: Mon, 16 Mar 2026 16:36:46 +1100
Subject: [PATCH] containers/citrine: use pq kex algorithms for ssh

---
 containers/citrine/configuration.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/containers/citrine/configuration.nix b/containers/citrine/configuration.nix
index f84f8b6..05a099a 100644
--- a/containers/citrine/configuration.nix
+++ b/containers/citrine/configuration.nix
@@ -19,6 +19,7 @@
         START_SSH_SERVER = true;
         BUILTIN_SSH_SERVER_USER = "git";
         SSH_DOMAIN = "git.lava.moe";
+        SSH_SERVER_KEY_EXCHANGES = "mlkem768x25519-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256";
       };
       ui = lib.mkForce {
         DEFAULT_THEME = "catppuccin-maroon-auto";