diff --git a/seb4itik/byow/roles/consul/tasks/main.yml b/seb4itik/byow/roles/consul/tasks/main.yml
index 17d5ff4..145cc89 100644
--- a/seb4itik/byow/roles/consul/tasks/main.yml
+++ b/seb4itik/byow/roles/consul/tasks/main.yml
@@ -30,6 +30,7 @@
     groups: ["ssl-cert"]
     password: "!"
     system: true
+    shell: "/usr/sbin/nologin"
     home: "/opt/consul"
 
 - name: Create Consul config directory