diff --git a/README.md b/README.md index d364e87..b6731a7 100644 --- a/README.md +++ b/README.md @@ -12,5 +12,6 @@ Role to install Nginx. | `nginx_bad_client_ip` | | List of IP address to deny access | | `nginx_type` | | `gateway` for a Reverse Proxy, `standalone` for a frontend webserver, `backend` for a backend webserver (behind a Reverse Proxy) | | `dhparam_path` | `/etc/ssl/private/dhparam.pem` | Path to dhparam file | +| `dhparam_size` | `4096` | Size (in bits) of the generated DH-params | diff --git a/tasks/configure.yml b/tasks/configure.yml index a463cfa..732e433 100644 --- a/tasks/configure.yml +++ b/tasks/configure.yml @@ -1,4 +1,9 @@ --- +- name: "Configuration | Generate DH Parameters" + community.crypto.openssl_dhparam: + path: "{{ dhparam_path }}" + size: "{{ dhparam_size | default(4096) }}" + - name: "Configuration | Copy main configuration" ansible.builtin.template: src: nginx.conf.j2