diff --git a/roles/nginx/tasks/main.json b/roles/nginx/tasks/main.json
index 5c05215..9d6a05b 100644
--- a/roles/nginx/tasks/main.json
+++ b/roles/nginx/tasks/main.json
@@ -12,6 +12,7 @@
 	},
 	{
 		"name": "generate dhparams file",
+		"become": true,
 		"ansible.builtin.command": "openssl dhparam -out /etc/nginx/dhparam 4096",
 		"args": {
 			"creates": "/etc/nginx/dhparam"