diff --git a/templates/blank/ce-dev/ansible/provision.yml.j2 b/templates/blank/ce-dev/ansible/provision.yml.j2
index 1f1194c..4f1cd80 100644
--- a/templates/blank/ce-dev/ansible/provision.yml.j2
+++ b/templates/blank/ce-dev/ansible/provision.yml.j2
@@ -6,6 +6,8 @@
     - project_name: {{ project_name }}
     - _domain_name: www.{{ project_name }}.local
     - _env_type: dev
+    - rkhunter:
+        allow_ssh_root_user: prohibit-password
     - lhci:
         enable_vnc: true
     - nodejs:
diff --git a/templates/drupal8/ce-dev/ansible/provision.yml.j2 b/templates/drupal8/ce-dev/ansible/provision.yml.j2
index 2f75b3f..1cb1a92 100644
--- a/templates/drupal8/ce-dev/ansible/provision.yml.j2
+++ b/templates/drupal8/ce-dev/ansible/provision.yml.j2
@@ -4,6 +4,8 @@
     - _domain_name: www.{{ project_name }}.local
     - _env_type: dev
     - project_name: {{ project_name }}
+    - rkhunter:
+        allow_ssh_root_user: prohibit-password
     - mysql_client:
         host: {{ project_name }}-db
         user: root
diff --git a/templates/drupal9/ce-dev/ansible/provision.yml.j2 b/templates/drupal9/ce-dev/ansible/provision.yml.j2
index 59439d1..1c252ef 100644
--- a/templates/drupal9/ce-dev/ansible/provision.yml.j2
+++ b/templates/drupal9/ce-dev/ansible/provision.yml.j2
@@ -4,6 +4,8 @@
     - _domain_name: www.{{ project_name }}.local
     - _env_type: dev
     - project_name: {{ project_name }}
+    - rkhunter:
+        allow_ssh_root_user: prohibit-password
     - mysql_client:
         host: {{ project_name }}-db
         user: root
diff --git a/templates/localgov/ce-dev/ansible/provision.yml.j2 b/templates/localgov/ce-dev/ansible/provision.yml.j2
index 2f75b3f..1cb1a92 100644
--- a/templates/localgov/ce-dev/ansible/provision.yml.j2
+++ b/templates/localgov/ce-dev/ansible/provision.yml.j2
@@ -4,6 +4,8 @@
     - _domain_name: www.{{ project_name }}.local
     - _env_type: dev
     - project_name: {{ project_name }}
+    - rkhunter:
+        allow_ssh_root_user: prohibit-password
     - mysql_client:
         host: {{ project_name }}-db
         user: root