---
- name: Install server packages
  apt: pkg={{ item }} state=present
  with_items:
    - mercurial # for extra modules
    - prosody
    - lua-event
    - lua-sec
  tags: [packages]
- include: extra-modules.yml
  sudo: yes
  sudo_user: prosody
- name: Generate a Diffie-Hellman key exchange parameters file
  command: >
    openssl dhparam
    {% if ansible_virtualization_type == "virtualbox" %}-dsaparam{% endif %}
    -out /etc/prosody/dh-2048.pem
    2048
  args:
    creates: /etc/prosody/dh-2048.pem
  notify:
    - restart prosody
- name: Work around default config bug
  file: src=../../ssl/certs/ssl-cert-snakeoil.pem dest=/etc/prosody/certs/localhost.crt state=link
  notify:
    - restart prosody
- name: Disable localhost VirtualHost
  file: path=/etc/prosody/conf.d/localhost.cfg.lua state=absent
  notify:
    - restart prosody
- name: Open ports
  ufw: rule=allow port=xmpp-client proto=tcp
  when: ansible_virtualization_type == "virtualbox"
  tags: [ufw]
...