diff --git a/nix/hosts/cc-ci-orchestrator-hetzner/configuration.nix b/nix/hosts/cc-ci-orchestrator-hetzner/configuration.nix
index 5ca2b8a..b449155 100644
--- a/nix/hosts/cc-ci-orchestrator-hetzner/configuration.nix
+++ b/nix/hosts/cc-ci-orchestrator-hetzner/configuration.nix
@@ -34,7 +34,7 @@
   services.tailscale = {
     enable = true;
     authKeyFile = "/etc/ts-auth-key";
-    extraUpFlags = [ "--hostname=cc-ci-orchestrator" "--ssh" ];
+    extraUpFlags = [ "--hostname=cc-ci-orchestrator" ];
   };
 
   # 4 GB disk swap — claude session memory safety net (2 GB RAM is tight for 3+ sessions).