docs: improve explanation of DH parameter condition

This commit is contained in:
Lars Kruse 2023-01-04 13:25:05 +01:00
parent 9d9b6deb5e
commit fd43dbbb59

View file

@ -15,8 +15,9 @@
- name: "apache | Generiere Diffie-Hellman-Parameter" - name: "apache | Generiere Diffie-Hellman-Parameter"
openssl_dhparam: openssl_dhparam:
path: "{{ dhparams_path }}" path: "{{ dhparams_path }}"
# All of our apache2 instances are currently running behind public reverse proxies. # Most of our apache2 instances are currently running behind public reverse proxies.
# Thus, they do not offer HTTPS and do not need DH parameters. # Thus, they do not offer HTTPS and do not need DH parameters.
# The only possible exceptions are external hosts (e.g. orwell).
when: "'extern_hosts' in group_names" when: "'extern_hosts' in group_names"
- name: "configuration | Kopiere Dateien" - name: "configuration | Kopiere Dateien"