diff --git a/config/network.nix b/config/network.nix
index 64642f2..9cae294 100644
--- a/config/network.nix
+++ b/config/network.nix
@@ -7,6 +7,13 @@
       enable = true;
       ports = [22];
       settings = {
+        KexAlgorithms = [
+          "curve25519-sha256"
+          "curve25519-sha256@libssh.org"
+          "diffie-hellman-group16-sha512"
+          "diffie-hellman-group18-sha512"
+          "sntrup761x25519-sha512@openssh.com"
+        ];
         PasswordAuthentication = false;
         PermitRootLogin = "no";
         StreamLocalBindUnlink = "yes";