## MODIFIED Requirements

### Requirement: Surge client config is generated after deployment
The playbook SHALL render a Surge client configuration file on the Ansible controller using the actual deployed parameters (relay domain, ports, passwords, landing domain, Trojan password).

#### Scenario: Surge config generated
- **WHEN** the playbook completes server deployment
- **THEN** a Surge client config is written to `output/surge-client.conf` on the Ansible controller
- **THEN** the config contains relay domain, SS port, SS password, landing domain, Trojan password