diff --git a/ansible/roles/semaphore/tasks/main.yml b/ansible/roles/semaphore/tasks/main.yml
index 588c6b5..08e242e 100644
--- a/ansible/roles/semaphore/tasks/main.yml
+++ b/ansible/roles/semaphore/tasks/main.yml
@@ -41,7 +41,8 @@
       SEMAPHORE_ADMIN: admin
       SEMAPHORE_ADMIN_PASSWORD: "{{ vault_semaphore_admin_password }}"
       SEMAPHORE_ACCESS_KEY_ENCRYPTION: "{{ vault_semaphore_access_key_encryption }}"
-    user: "{{ semaphore_user }}"
+    # Run as root inside the container (common for Semaphore)
+    # The container itself runs rootless via the host 'cast' user context
 
 - name: Generate systemd service for the container
   ansible.builtin.command: