diff --git a/roles/base/handlers/main.yml b/roles/base/handlers/main.yml
index be244ee..5b99891 100644
--- a/roles/base/handlers/main.yml
+++ b/roles/base/handlers/main.yml
@@ -7,7 +7,9 @@
 
 - name: Reconfigure locales
   ansible.builtin.command: dpkg-reconfigure -f noninteractive locales
+  changed_when: false
   listen: reconfigure_locales
+  when: not ansible_check_mode
 
 - name: Restart WireGuard
   ansible.builtin.service:
diff --git a/roles/proxy/defaults/main.yml b/roles/proxy/defaults/main.yml
index a87fd50..0f1603c 100644
--- a/roles/proxy/defaults/main.yml
+++ b/roles/proxy/defaults/main.yml
@@ -1 +1 @@
-cached_dhparams_pem: /vagrant/scratch/dhparams.pem
+proxy_cached_dhparams_pem: /vagrant/scratch/dhparams.pem
diff --git a/roles/proxy/tasks/main.yml b/roles/proxy/tasks/main.yml
index f267bcf..57960b5 100644
--- a/roles/proxy/tasks/main.yml
+++ b/roles/proxy/tasks/main.yml
@@ -12,12 +12,12 @@
 
 - name: Check for cached dhparams.pem file
   ansible.builtin.stat:
-    path: "{{ cached_dhparams_pem }}"
+    path: "{{ proxy_cached_dhparams_pem }}"
   register: dhparams_file
 
 - name: Copy cached dhparams.pem to /etc/ssl/
   ansible.builtin.copy:
-    src: "{{ cached_dhparams_pem }}"
+    src: "{{ proxy_cached_dhparams_pem }}"
     dest: /etc/ssl/dhparams.pem
     mode: "600"
     remote_src: true