diff --git a/playbooks/bootstrap.yml b/playbooks/bootstrap.yml
index e074ac7..34710cb 100644
--- a/playbooks/bootstrap.yml
+++ b/playbooks/bootstrap.yml
@@ -32,8 +32,8 @@
 
     # Install the Wireguard admin VPN
     - role: system/wg-admin
-      tags: wg-admin
       become: true
+      tags: wg-admin
 
     # Handle basic user configuration
     - user/base