enforce forgejo post-quantum

https://www.openssh.org/pq.html
2026-02-26 15:18:57 +10:00 · 2026-02-26 15:18:57 +10:00 · 08fa63889b
commit 08fa63889b
parent 76bf148b1e
1 changed files with 3 additions and 0 deletions
--- a/hosts/butterfly/services/forgejo.nix
+++ b/hosts/butterfly/services/forgejo.nix
@ -57,6 +57,9 @@ in {
        START_SSH_SERVER = true;
        DISABLE_SSH = false;
        SSH_PORT = 2222;
+
+        SSH_SERVER_CIPHERS = "chacha20-poly1305@openssh.com,";
+        SSH_SERVER_KEY_EXCHANGES = "sntrup761x25519-sha512,mlkem768x25519-sha256";
      };

      DEFAULT = {