diff --git a/hosts/sid/services/step-ca.nix b/hosts/sid/services/step-ca.nix
index f004d65..396f7c6 100644
--- a/hosts/sid/services/step-ca.nix
+++ b/hosts/sid/services/step-ca.nix
@@ -58,6 +58,8 @@ in
           "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"
           "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
         ];
+        minVersion = "1.2";
+        maxVersion = "1.3";
         renegotiation = false;
       };
     };