From 9d9b6deb5edbe2f1fa7bbb9ae3e5e16330787048 Mon Sep 17 00:00:00 2001
From: Lars Kruse <devel@sumpfralle.de>
Date: Wed, 4 Jan 2023 12:50:21 +0100
Subject: [PATCH] docs: explain the absence of DH parameter files for apache
 setups

---
 tasks/configuration.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tasks/configuration.yml b/tasks/configuration.yml
index 57edd99..04a9e82 100644
--- a/tasks/configuration.yml
+++ b/tasks/configuration.yml
@@ -15,6 +15,8 @@
 - name: "apache | Generiere Diffie-Hellman-Parameter"
   openssl_dhparam:
     path: "{{ dhparams_path }}"
+  # All of our apache2 instances are currently running behind public reverse proxies.
+  # Thus, they do not offer HTTPS and do not need DH parameters.
   when: "'extern_hosts' in group_names"
 
 - name: "configuration | Kopiere Dateien"