diff --git a/hosts/ha-server-1/host.nix b/hosts/ha-server-1/host.nix
index 6afb486..f1b91b0 100644
--- a/hosts/ha-server-1/host.nix
+++ b/hosts/ha-server-1/host.nix
@@ -24,7 +24,7 @@
   };
 
   # Set KEY after pairing this host with the beszel hub; the token is sops-managed.
-  services.beszel.agent.environment.KEY = "";
+  # services.beszel.agent.environment.KEY = "";
 
   system.stateVersion = "26.05";
 }
diff --git a/hosts/ha-server-2/host.nix b/hosts/ha-server-2/host.nix
index 2f798f4..4439a33 100644
--- a/hosts/ha-server-2/host.nix
+++ b/hosts/ha-server-2/host.nix
@@ -24,7 +24,7 @@
   };
 
   # Set KEY after pairing this host with the beszel hub; the token is sops-managed.
-  services.beszel.agent.environment.KEY = "";
+  # services.beszel.agent.environment.KEY = "";
 
   system.stateVersion = "26.05";
 }
diff --git a/modules/build-types/ha-server.nix b/modules/build-types/ha-server.nix
index 163b4ec..b4ed7b0 100644
--- a/modules/build-types/ha-server.nix
+++ b/modules/build-types/ha-server.nix
@@ -30,7 +30,7 @@ in
     ../ha/pacemaker-stack.nix
     ../ha/iscsi-target.nix
     ../ha/cluster-config.nix
-    ../beszel/enable-agent.nix
+    # ../beszel/enable-agent.nix
   ];
 
   # xfsprogs: mkfs.xfs/xfs_info needed by cluster-init.sh.
diff --git a/scripts/ha/acceptance-tests.sh b/scripts/ha/acceptance-tests.sh
old mode 100644
new mode 100755
diff --git a/scripts/ha/cluster-enable-stonith.sh b/scripts/ha/cluster-enable-stonith.sh
old mode 100644
new mode 100755
diff --git a/scripts/ha/fence-pve-ssh.py b/scripts/ha/fence-pve-ssh.py
old mode 100644
new mode 100755