diff --git a/clan/machines.nix b/clan/machines.nix
index 22e1e36..47d0370 100644
--- a/clan/machines.nix
+++ b/clan/machines.nix
@@ -27,7 +27,8 @@
       tags = [
         "garage"
         "server"
-        "dns"
+        # FIXME: find a way to protect the public DNS against DoS
+        # "dns"
       ];
     };
   };