Move dh2048 creation to base, remove server-scripts from base

[ansible.git] / roles / prosody / templates / prosody.cfg.lua

diff --git a/roles/prosody/templates/prosody.cfg.lua b/roles/prosody/templates/prosody.cfg.lua
index 4f99029ba609b931c75b8835d66ae47eaebeb779..fd805cc538b7f156502192bcbdd373b7dea03873 100644 (file)
--- a/roles/prosody/templates/prosody.cfg.lua
+++ b/roles/prosody/templates/prosody.cfg.lua
@@ -119,7 +119,7 @@ ssl = {
        key = "/etc/ssl/private/letsencrypt/live.key";
        certificate = "/etc/ssl/mycerts/letsencrypt/live.crt+chain";
        ciphers = "ALL:!EXPORT:!LOW:!MEDIUM:!aNULL:!3DES";
        key = "/etc/ssl/private/letsencrypt/live.key";
        certificate = "/etc/ssl/mycerts/letsencrypt/live.crt+chain";
        ciphers = "ALL:!EXPORT:!LOW:!MEDIUM:!aNULL:!3DES";

-       dhparam = "{{ prosody.paths.dh2048 }}";
+       dhparam = "/etc/ssl/dh2048.pem";

 }
 -- support legacy clients
 legacy_ssl_ports = { 5223 }
 }
 -- support legacy clients
 legacy_ssl_ports = { 5223 }