chore: update flake

host/ark/service/git.nix

@@ -1,4 +1,23 @@
 { lib, config, pkgs, ... }: {
+
+  services.openssh = {
+    enable = true;
+
+    # hostKeys = [
+    #   { path = "/etc/ssh/ssh_host_ed25519_key"; type = "ed25519"; }
+    #   { path = "/etc/ssh/ssh_host_rsa_key"; type = "rsa"; bits = 4096; }
+    # ];
+
+    settings = {
+      # explicitly allow post-quantum KEX
+      KexAlgorithms = [
+        "mlkem768x25519-sha256"
+        "sntrup761x25519-sha512"
+        "curve25519-sha256"
+      ];
+    };
+  };
+
   services.gitea = {
     enable = true;
     user = "git";