[defaults] # Do not prompt or fail on unknown host keys (Semaphore runner has no ~/.ssh/known_hosts) host_key_checking = False # Disable become by default — playbooks/tasks set become: true explicitly where needed. # This overrides any system-wide become=True in /etc/ansible/ansible.cfg on the runner. become = False