3 files changed, 3 insertions, 1 deletions

diff --git a/accounts/gkleen@sif/default.nix b/accounts/gkleen@sif/default.nix
index d40b1c92..05cfc2c8 100644
--- a/accounts/gkleen@sif/default.nix
+++ b/accounts/gkleen@sif/default.nix
@@ -136,7 +136,7 @@ in {
               KbdInteractiveAuthentication yes
               UpdateHostKeys yes
               GlobalKnownHostsFile ${pkgs.writeText "ssh_known_hosts" ''
-                @cert-authority *.mathinst.loc,*.math.lmu.de ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBUTFpVCdETCXiDSDl7YGbR1J4BLTsoBzjDtflHJGO/z ssh-pki@mgmt01
+                @cert-authority *.mathinst.loc,*.math.lmu.de,*.cipmath.loc ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBUTFpVCdETCXiDSDl7YGbR1J4BLTsoBzjDtflHJGO/z ssh-pki@mgmt01
               ''}
 
             Match host *.mathinst.loc,*.math.lmu.de !host ssh.math.lmu.de !exec "nc -z -w 1 %h %p &>/dev/null"
diff --git a/accounts/gkleen@sif/ssh-hosts.nix b/accounts/gkleen@sif/ssh-hosts.nix
index 8cc0f04e..f141ca8e 100644
--- a/accounts/gkleen@sif/ssh-hosts.nix
+++ b/accounts/gkleen@sif/ssh-hosts.nix
@@ -546,6 +546,7 @@
       extraOptions = {
         PasswordAuthentication = "yes";
         KbdInteractiveAuthentication = "yes";
+        HostKeyAlgorithms = "+ecdsa-sha2-nistp256";
       };
     };
 }
diff --git a/user-profiles/yt-dlp.nix b/user-profiles/yt-dlp.nix
index 91f970bf..4ec6d6f7 100644
--- a/user-profiles/yt-dlp.nix
+++ b/user-profiles/yt-dlp.nix
@@ -23,6 +23,7 @@
           "youtube:player-client=android,web"
           "youtube:formats=dashy"
         ];
+        remux-video = "mp4>mkv";
       };
     };
   };