diff --git a/internal/cmd/configssh.go b/internal/cmd/configssh.go
index 120e9a86..0853a32e 100644
--- a/internal/cmd/configssh.go
+++ b/internal/cmd/configssh.go
@@ -205,14 +205,15 @@ func makeSSHConfig(host, userName, envName, privateKeyFilepath string, p2p bool)
 	if p2p {
 		return fmt.Sprintf(
 			`Host coder.%s
-   HostName localhost
-   ProxyCommand coder tunnel %s 22 stdio
+   HostName coder.%s
+   ProxyCommand coder tunnel %s 12213 stdio
    StrictHostKeyChecking no
    ConnectTimeout=0
+   IdentitiesOnly yes
    IdentityFile="%s"
    ServerAliveInterval 60
    ServerAliveCountMax 3
-`, envName, envName, privateKeyFilepath)
+`, envName, envName, envName, privateKeyFilepath)
 	}
 
 	return fmt.Sprintf(
diff --git a/internal/cmd/tunnel.go b/internal/cmd/tunnel.go
index 254e6df9..6194891a 100644
--- a/internal/cmd/tunnel.go
+++ b/internal/cmd/tunnel.go
@@ -126,7 +126,7 @@ func (c *tunnneler) start(ctx context.Context) error {
 		return xerrors.Errorf("dial ice: %w", err)
 	}
 
-	c.log.Info(ctx, "Connecting to workspace...")
+	c.log.Debug(ctx, "Connecting to workspace...")
 	wd, err := wsnet.DialWebsocket(ctx, wsnet.ConnectEndpoint(c.brokerAddr, c.workspaceID, c.token), []webrtc.ICEServer{server})
 	if err != nil {
 		return xerrors.Errorf("creating workspace dialer: %w", err)
@@ -135,7 +135,7 @@ func (c *tunnneler) start(ctx context.Context) error {
 	if err != nil {
 		return err
 	}
-	c.log.Info(ctx, "Connected to workspace!")
+	c.log.Debug(ctx, "Connected to workspace!")
 
 	// proxy via stdio
 	if c.stdio {