diff --git a/services/baremetal-builder/default.nix b/services/baremetal-builder/default.nix
index 5e4c51b..522513e 100644
--- a/services/baremetal-builder/default.nix
+++ b/services/baremetal-builder/default.nix
@@ -89,6 +89,7 @@ in
     ];
     networking.defaultGateway6 = { interface = "uplink"; address = "2a01:584:11::1"; };
     deployment.targetHost = "2a01:584:11::1:${toString cfg.num}";
+    deployment.tags = [ "builders" ];
 
     networking.nameservers = lib.mkForce ["2001:4860:4860::6464"]; # todo: other dns64