diff --git a/roles/nginx/tasks/main.json b/roles/nginx/tasks/main.json
index 5d7135b..9748e6d 100644
--- a/roles/nginx/tasks/main.json
+++ b/roles/nginx/tasks/main.json
@@ -12,7 +12,10 @@
 	},
 	{
 		"name": "generate dhparams file",
-		"ansible.builtin.command": "openssl dhparam -out /etc/nginx/dhparam 4096",
+		"become": true,
+		"ansible.builtin.command": {
+			"cmd": "openssl dhparam -out /etc/nginx/dhparam 4096"
+		},
 		"args": {
 			"creates": "/etc/nginx/dhparam"
 		}