diff --git a/ansible/install/roles/no-sshd-dns/tasks/main.yml b/ansible/install/roles/no-sshd-dns/tasks/main.yml
index a3ffd57ab..760dcc471 100644
--- a/ansible/install/roles/no-sshd-dns/tasks/main.yml
+++ b/ansible/install/roles/no-sshd-dns/tasks/main.yml
@@ -6,7 +6,7 @@
       dest: /etc/ssh/sshd_config
       line: "UseDNS no"
       state: present
-      insertbefore: '^Match'
+      insertbefore: BOF
   when: "{{disable_ssh_dns}}"
   become: true
   become_user: root