diff --git a/CHANGELOG.md b/CHANGELOG.md
index e12a47e..3e5e3ad 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,7 +10,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 #### Added
 
-- [STACK]  UFW as a STACK available with `--ufw`
+- [STACK]  UFW now available as a stack with flag `--ufw`
 - [SECURE] `wo stack secure --ssh` to harden ssh security
 - [SECURE] `wo stack secure --sshport` to change ssh port
 
@@ -27,6 +27,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 - `wo stack purge --all` failure if mysql isn't installed
 - Fix EEv3 files cleanup
+- Incorrect variable usage in `wo secure --port`
 
 ### v3.9.8.12 - 2019-09-20
 
diff --git a/wo/cli/templates/sshd.mustache b/wo/cli/templates/sshd.mustache
index 6f19a03..cdd2939 100644
--- a/wo/cli/templates/sshd.mustache
+++ b/wo/cli/templates/sshd.mustache
@@ -10,7 +10,7 @@ HostKey /etc/ssh/ssh_host_ed25519_key
 PermitRootLogin without-password
 
 # Allow ssh access to some users only
-AllowUsers root ubuntu
+AllowUsers root ubuntu debian
 
 # allow ssh key Authentication
 PubkeyAuthentication yes