diff --git a/ignition/base.bu b/ignition/base.bu
index 66b1609..3d5e6d3 100644
--- a/ignition/base.bu
+++ b/ignition/base.bu
@@ -40,8 +40,8 @@ systemd:
         [Service]
         Type=oneshot
         RemainAfterExit=yes
-        #ExecStart=/usr/bin/systemctl stop sshd
-        #ExecStart=/usr/bin/systemctl disable sshd
+        ExecStart=/usr/bin/systemctl stop sshd
+        ExecStart=/usr/bin/systemctl disable sshd
         ExecStart=/usr/bin/touch /var/lib/%N.stamp
 
         [Install]
diff --git a/ignition/base.ign b/ignition/base.ign
index 5124427..d8bb212 100644
--- a/ignition/base.ign
+++ b/ignition/base.ign
@@ -30,7 +30,7 @@
   "systemd": {
     "units": [
       {
-        "contents": "[Unit]\nDescription=Block SSH during configuration\nAfter=network-online.target\nBefore=zincati.service\nConditionPathExists=!/var/lib/%N.stamp\n\n[Service]\nType=oneshot\nRemainAfterExit=yes\n#ExecStart=/usr/bin/systemctl stop sshd\n#ExecStart=/usr/bin/systemctl disable sshd\nExecStart=/usr/bin/touch /var/lib/%N.stamp\n\n[Install]\nWantedBy=multi-user.target\n",
+        "contents": "[Unit]\nDescription=Block SSH during configuration\nAfter=network-online.target\nBefore=zincati.service\nConditionPathExists=!/var/lib/%N.stamp\n\n[Service]\nType=oneshot\nRemainAfterExit=yes\nExecStart=/usr/bin/systemctl stop sshd\nExecStart=/usr/bin/systemctl disable sshd\nExecStart=/usr/bin/touch /var/lib/%N.stamp\n\n[Install]\nWantedBy=multi-user.target\n",
         "enabled": true,
         "name": "ignition-start-config.service"
       },