ansible-proxy-chain/openspec/changes/archive/2026-04-22-fix-localhost-become/proposal.md

Why

ansible.cfg sets become = True globally, which makes the localhost play try to use sudo for local file operations. This fails because the local user may not have passwordless sudo, causing "sudo: a password is required" errors when generating the Surge config.

What Changes

• Add become: false to the "Generate Surge client configuration" play in site.yml

Capabilities

New Capabilities

Modified Capabilities

Impact

• site.yml: add become: false to the localhost play