diff --git a/templates/sshd_config.erb b/templates/sshd_config.erb
index 4e7a512..9304fe3 100644
--- a/templates/sshd_config.erb
+++ b/templates/sshd_config.erb
@@ -88,3 +88,6 @@ UsePAM yes
 # allow ansible connections from puppetmaster host
 Match host <%= @trusted_ssh_source %>
     PermitRootLogin without-password
+# allow ansible connections from localhost
+Match host localhost
+    PermitRootLogin without-password