From 207283570e78f12122dda5237fc74eaf00795713 Mon Sep 17 00:00:00 2001
From: Brian Lee <blee@satstack.cloud>
Date: Fri, 11 Aug 2023 12:24:10 -0700
Subject: [PATCH] dhparams variable

---
 defaults/main.yml  | 2 +-
 tasks/dhparams.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/defaults/main.yml b/defaults/main.yml
index c211101..e7e470a 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -2,7 +2,7 @@
 acme_path: /var/acme
 acme_system_user: acme
 acme_system_group: acme
-nginx_config_dhparam: "/etc/ssl/dhparams.pem"
+nginx_config_dhparam: /etc/ssl/dhparams.pem
 nginx_user: nginx
 
 lego_environment:
diff --git a/tasks/dhparams.yml b/tasks/dhparams.yml
index c383864..42bb5c4 100644
--- a/tasks/dhparams.yml
+++ b/tasks/dhparams.yml
@@ -18,5 +18,5 @@
 # https://docs.ansible.com/ansible/latest/collections/community/crypto/openssl_dhparam_module.html
 - name: Generate Diffie-Hellman parameters with the default size (4096 bits)
   community.crypto.openssl_dhparam:
-    path: "/etc/ssl/dhparams.pem"
+    path: "{{ nginx_config_dhparam }}"
   tags: dhparams