diff --git a/deployment/data-model.nix b/deployment/data-model.nix
index 961cd7ad..63c067b2 100644
--- a/deployment/data-model.nix
+++ b/deployment/data-model.nix
@@ -548,7 +548,7 @@ let
                     (pkgs.callPackage ./run/tf-proxmox/tf.nix { inherit sources; })
                   ])
                   ''
-                    set -xe
+                    set -e
 
                     # bash ./infra/proxmox-remove.sh \
                     #   --api-url "https://${proxmox-host}:8006/api2/json" \
diff --git a/deployment/run/tf-proxmox/run.sh b/deployment/run/tf-proxmox/run.sh
index 7ab6236d..9225eb07 100644
--- a/deployment/run/tf-proxmox/run.sh
+++ b/deployment/run/tf-proxmox/run.sh
@@ -1,5 +1,5 @@
 #! /usr/bin/env bash
-set -xeuo pipefail
+set -euo pipefail
 declare tf_env
 
 export TF_LOG=info
diff --git a/deployment/run/tf-setup.nix b/deployment/run/tf-setup.nix
index 4166812e..5c94e6d0 100644
--- a/deployment/run/tf-setup.nix
+++ b/deployment/run/tf-setup.nix
@@ -4,7 +4,7 @@
   sources,
 }:
 pkgs.writeScriptBin "setup" ''
-  set -xe
+  set -e
   # calculated pins
   echo '${lib.strings.toJSON sources}' > ./.npins.json
   # generate TF lock for nix's TF providers