From 9d78b39bd0038c17160c9939cb95210eb2b6dd8b Mon Sep 17 00:00:00 2001
From: derped <derped@ophanim.de>
Date: Sun, 10 Sep 2023 15:25:20 +0200
Subject: [PATCH] Openssh: KexAlgorithms => settings.KexAlgorithms; disable
 startWhenNeeded.

---
 services/openssh.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/services/openssh.nix b/services/openssh.nix
index e6d5979..3c239a4 100644
--- a/services/openssh.nix
+++ b/services/openssh.nix
@@ -9,9 +9,9 @@ with lib;
 mkIf (elem "openssh" config.machine.services) {
   services.openssh = {
     enable = true;
-    kexAlgorithms = [ "curve25519-sha256@libssh.org" ];
+    settings.KexAlgorithms = [ "curve25519-sha256@libssh.org" ];
     sftpFlags = [ "-f AUTHPRIV" "-l INFO" ];
-    startWhenNeeded = true;
+    startWhenNeeded = false;
     settings = {
       KbdInteractiveAuthentication = false;
       PasswordAuthentication = false;