diff --git a/sshd_config/defaults/main.yml b/sshd_config/defaults/main.yml
index 49279a4..f723243 100644
--- a/sshd_config/defaults/main.yml
+++ b/sshd_config/defaults/main.yml
@@ -14,7 +14,7 @@ sshd_use_pam: "yes"
 sshd_challenge_response_authentication: "no"
 sshd_enable_sftp_subsystem: True
 sshd_use_login: "no"
-sshd_permit_tunnel: "yes"
+sshd_permit_tunnel: "no"
 sshd_gssapi_authentication: "no"
 sshd_gssapi_credentials: "no"
 sshd_x11_forwarding: "no"
diff --git a/ubuntu-deb-general/meta/main.yml b/ubuntu-deb-general/meta/main.yml
index 041d042..dbe7332 100644
--- a/ubuntu-deb-general/meta/main.yml
+++ b/ubuntu-deb-general/meta/main.yml
@@ -4,4 +4,5 @@ dependencies:
   - role: '../../library/roles/timezone'
   - role: '../../library/roles/deb-set-hostname'
   - role: '../../library/roles/deb-set-locale'
+  - role: '../../library/roles/sshd_config'
   - role: '../../library/roles/fail2ban'