diff --git a/tasks/nix.yml b/tasks/nix.yml
index b21e345c..63b637c4 100644
--- a/tasks/nix.yml
+++ b/tasks/nix.yml
@@ -141,6 +141,7 @@
           register: gossip_key_tempfile
 
         - name: Generate gossip encryption key # noqa no-changed-when
+          become: false
           ansible.builtin.shell: PATH={{ consul_bin_path }}:$PATH consul keygen > {{ gossip_key_tempfile.path }}
           register: consul_keygen