diff --git a/playbooks/ood.yml b/playbooks/ood.yml
index 220db679..1ba14eaf 100644
--- a/playbooks/ood.yml
+++ b/playbooks/ood.yml
@@ -594,6 +594,16 @@
       dest: /usr/bin/yq
       mode: 0755
 
+  - name: create ood shell env directory
+    file:
+      path: /etc/ood/config/apps/shell
+      state: directory
+
+  - name: Copy the shell env file
+    template:
+      src: 'env.j2'
+      dest: '/etc/ood/config/apps/shell/env'
+
 # Configure bc_desktop for dynamic remote viz targets
   - name: copy bc_desktop file
     copy:
diff --git a/playbooks/templates/env.j2 b/playbooks/templates/env.j2
new file mode 100644
index 00000000..0806c5dc
--- /dev/null
+++ b/playbooks/templates/env.j2
@@ -0,0 +1 @@
+OOD_SSHHOST_ALLOWLIST={{'{'}}{{ queues | map(attribute='name') | join(',') }}{{'}'}}-[0-9]*
\ No newline at end of file