diff --git a/ansible/install/roles/no-sshd-dns/tasks/main.yml b/ansible/install/roles/no-sshd-dns/tasks/main.yml
index 23227c366..a3ffd57ab 100644
--- a/ansible/install/roles/no-sshd-dns/tasks/main.yml
+++ b/ansible/install/roles/no-sshd-dns/tasks/main.yml
@@ -2,7 +2,11 @@
 ---
 
 - name: Disable DNS resolution in Overcloud sshd config
-  lineinfile: dest=/etc/ssh/sshd_config line="UseDNS no" state=present
+  lineinfile:
+      dest: /etc/ssh/sshd_config
+      line: "UseDNS no"
+      state: present
+      insertbefore: '^Match'
   when: "{{disable_ssh_dns}}"
   become: true
   become_user: root