diff --git a/machines/agentjones.nix b/machines/agentjones.nix
index 76d323b..cde9245 100644
--- a/machines/agentjones.nix
+++ b/machines/agentjones.nix
@@ -28,9 +28,8 @@ in {
     targetPort = 22;
     targetUser = "root";
 
-    tags = [ "active-core" ];
-
-    buildOnTarget = true;
+    # somehow ssh from runner to this fails
+    tags = [ "active-firewall" ];
   };
 
   skynet_dns.records = [