diff --git a/talos/patch-worker.yaml b/talos/patch-worker.yaml
index d0dc086..9c5df66 100644
--- a/talos/patch-worker.yaml
+++ b/talos/patch-worker.yaml
@@ -15,7 +15,15 @@
 # Both VMs use `ens18`. Their DHCP-reserved MAC addresses keep worker01 at
 # 10.10.10.203 and worker02 at 10.10.10.204 while DHCP supplies their gateway
 # and DNS settings.
+#
+# `nodeLabels` makes the worker role visible in `kubectl get nodes` and tells
+# Longhorn that these two nodes—and only these two—may create a default disk.
+# apps/longhorn/values.yaml enables this opt-in behavior so the Raspberry Pi
+# control planes never fall back to their small system disks.
 machine:
+  nodeLabels:
+    node-role.kubernetes.io/worker: ""
+    node.longhorn.io/create-default-disk: "true"
   install:
     disk: /dev/sda
     image: factory.talos.dev/metal-installer/88d1f7a5c4f1d3aba7df787c448c1d3d008ed29cfb34af53fa0df4336a56040b:v1.13.8