diff --git a/peering.nix b/peering.nix
index b25f215..8549400 100644
--- a/peering.nix
+++ b/peering.nix
@@ -132,5 +132,12 @@ in
           ++ optionals host.isRouter [ "10.127.0.0/16" "fd70:81ca:0f8f::/48" ];
       };
     };
+
+    services.openssh.knownHosts = builtins.mapAttrs
+      (name: host: {
+        publicKey = host.hostKey;
+        hostNames = [ host.ipv4 host.ipv6 ];
+      })
+      hosts;
   };
 }