diff --git a/cluster/prod/node/io.nix b/cluster/prod/node/io.nix
index 4e53102..e6d3c3a 100644
--- a/cluster/prod/node/io.nix
+++ b/cluster/prod/node/io.nix
@@ -3,6 +3,8 @@
   boot.loader.grub.enable = true;
   boot.loader.grub.device = "/dev/sda";
 
+  services.openssh.ports = [ 22 33603 ];
+
   deuxfleurs.hostName = "io";
   deuxfleurs.staticIPv4.address = "192.168.1.36";
   deuxfleurs.staticIPv6.address = "2a01:e0a:5e4:1d0:52e5:49ff:fe5c:5f35";
diff --git a/cluster/prod/node/onion.nix b/cluster/prod/node/onion.nix
index 0e3c719..8b6f8d6 100644
--- a/cluster/prod/node/onion.nix
+++ b/cluster/prod/node/onion.nix
@@ -4,6 +4,8 @@
   boot.loader.timeout = 20;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  services.openssh.ports = [ 22 33601 ];
+
   deuxfleurs.hostName = "onion";
   deuxfleurs.staticIPv4.address = "192.168.1.34";
   deuxfleurs.staticIPv6.address = "2a01:e0a:5e4:1d0:223:24ff:feb0:e866";
diff --git a/cluster/prod/node/oseille.nix b/cluster/prod/node/oseille.nix
index 5c68121..b0f7723 100644
--- a/cluster/prod/node/oseille.nix
+++ b/cluster/prod/node/oseille.nix
@@ -4,6 +4,8 @@
   boot.loader.timeout = 20;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  services.openssh.ports = [ 22 33602 ];
+
   deuxfleurs.hostName = "oseille";
   deuxfleurs.staticIPv4.address = "192.168.1.35";
   deuxfleurs.staticIPv6.address = "2a01:e0a:5e4:1d0:223:24ff:feaf:f90b";