1 files changed, 1 insertions, 0 deletions

diff --git a/hosts/surtr/tls.nix b/hosts/surtr/tls.nix
index 3aa53fb0..f05420cc 100644
--- a/hosts/surtr/tls.nix
+++ b/hosts/surtr/tls.nix
@@ -65,6 +65,7 @@ in {
             dnsProvider = "exec";
             credentialsFile = knotDNSCredentials domain;
             dnsResolver = "1.1.1.1:53";
+            keyType = "rsa4096"; # we don't like NIST curves
           };
         in genAttrs domains domainAttrset;
     };