diff --git a/configs/workhorse/configuration.nix b/configs/workhorse/configuration.nix
index bb14ddc..3da882b 100644
--- a/configs/workhorse/configuration.nix
+++ b/configs/workhorse/configuration.nix
@@ -55,7 +55,8 @@
   configuration.init-ssh = {
     enable = "enabled";
     kernelModules = [ "r8169" ];
-    hostECDSAKey = <secrets/init-ssh/host_ecdsa_key>;
+    #hostECDSAKey = <secrets/init-ssh/host_ecdsa_key>;
+    hostECDSAKey = <secrets/init-ssh/ssh_host_ed25519_key>;
   };
 
   # nix-shell -p speedtest_cli --run speedtest
diff --git a/configs/workhorse/nextcloud.nix b/configs/workhorse/nextcloud.nix
index 70e091a..7991e54 100644
--- a/configs/workhorse/nextcloud.nix
+++ b/configs/workhorse/nextcloud.nix
@@ -188,7 +188,7 @@ in {
         #  };
         #});
         autoUpdateApps.enable = true;
-        nginx.enable = true;
+        #nginx.enable = true;
         hostName = "nextcloud.ingolf-wagner.de";
         #logLevel = 0;
         https = true;
diff --git a/system/all/sshd-known-hosts-bootup.nix b/system/all/sshd-known-hosts-bootup.nix
index ab5482c..3801aba 100644
--- a/system/all/sshd-known-hosts-bootup.nix
+++ b/system/all/sshd-known-hosts-bootup.nix
@@ -6,7 +6,7 @@ let
     workhorse = {
       onionId = fileContents <common_secrets/onion/workhorse>;
       publicKey =
-        "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBB+sHmukNa2TmtBDCqN+LVaYblvHztD/ziK2cbKR8dEHztF0YBS60MHMpbGPOII5NVMUY6Z2OHFBQi9X6PG1YBY=";
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII/I4JBA1HHTH2xsrEM7xtxkhRDE42lZcBrdBvN46WTx";
     };
     porani = {
       onionId = fileContents <common_secrets/onion/porani>;
diff --git a/system/server/initssh.nix b/system/server/initssh.nix
index 2cab128..d0fe5ba 100644
--- a/system/server/initssh.nix
+++ b/system/server/initssh.nix
@@ -93,7 +93,8 @@ in {
         port = cfg.port;
       };
       boot.initrd.availableKernelModules = cfg.kernelModules;
-      boot.initrd.network.ssh.hostECDSAKey = cfg.hostECDSAKey;
+      #boot.initrd.network.ssh.hostECDSAKey = cfg.hostECDSAKey;
+      boot.initrd.network.ssh.hostKeys = [ cfg.hostECDSAKey ];
     })
   ];
 }