Remove reference to become_user: root

This was the default anyway

ansible/roles/gateway/tasks/fail2ban.yml

@@ -2,14 +2,12 @@
   apt:
     name: fail2ban
   become: true
-  become_user: root
 
 - name: fail2ban filter
   template:
     src: files/haproxy-fail2ban-filter.conf
     dest: /etc/fail2ban/filter.d/haproxy-basic.conf
   become: true
-  become_user: root
   register: fail2ban_filter
 
 - name: fail2ban jail
@@ -17,7 +15,6 @@
     src: files/haproxy-fail2ban-jail.conf
     dest: /etc/fail2ban/jail.d/haproxy.conf
   become: true
-  become_user: root
   register: fail2ban_jail
 
 - name: Restart fail2ban
@@ -25,5 +22,4 @@
     name: haproxy
     state: restarted
   become: true
-  become_user: root
   when: fail2ban_filter.changed or fail2ban_jail.changed

ansible/roles/gateway/tasks/haproxy.yml

@@ -2,7 +2,6 @@
   apt:
     name: haproxy
   become: true
-  become_user: root
 
 - name: Haproxy config
   template:
@@ -11,7 +10,6 @@
     validate: /usr/sbin/haproxy -c -- %s
     backup: yes
   become: true
-  become_user: root
   register: haproxy_config
 
 - name: Restart Haproxy
@@ -19,5 +17,4 @@
     name: haproxy
     state: restarted
   become: true
-  become_user: root
   when: haproxy_config.changed

ansible/roles/gateway/tasks/wireguard.yml

@@ -5,21 +5,18 @@
     line: 'deb http://deb.debian.org/debian/ unstable main'
   register: install_unstable_apt
   become: true
-  become_user: root
 
 - name: Limit unstable apt repo
   copy:
     src: limit-unstable.conf
     dest: /etc/apt/preferences.d/limit-unstable
   become: true
-  become_user: root
   register: limit_unstable_apt
 
 - name: Update apt repos
   apt:
     update_cache: true
   become: true
-  become_user: root
   when: install_unstable_apt.changed or limit_unstable_apt.changed
 
 - name: Install Wireguard
@@ -28,7 +25,6 @@
       - wireguard
       - wireguard-tools
   become: true
-  become_user: root
 
 - name: Wireguard server config
   template:
@@ -36,7 +32,6 @@
     dest: /etc/wireguard/wg0.conf
     backup: yes
   become: true
-  become_user: root
   register: wireguard_conf
 
 - name: Enable wireguard
@@ -46,7 +41,6 @@
     enabled: true
   when: wireguard_conf.changed
   become: true
-  become_user: root
 
 - name: Create wireguard client directory
   file: