---
- name: Install server packages
  apt:
    pkg: '{{ item }}'
    state: present
  with_items:
    - mercurial  # for extra modules
    - prosody
    - lua-event
    - lua-sec
  tags: [packages]
- include: extra-modules.yml
  sudo: yes
  sudo_user: prosody
- name: Generate a Diffie-Hellman key exchange parameters file
  command: >
    openssl dhparam
    {% if ansible_virtualization_type == "virtualbox" %}-dsaparam{% endif %}
    -out /etc/prosody/dh-2048.pem
    2048
  args:
    creates: /etc/prosody/dh-2048.pem
  notify:
    - restart prosody
- name: Work around default config bug
  file:
    src: ../../ssl/certs/ssl-cert-snakeoil.pem
    dest: /etc/prosody/certs/localhost.crt
    state: link
  notify:
    - restart prosody
- name: Disable localhost VirtualHost
  file:
    path: /etc/prosody/conf.d/localhost.cfg.lua
    state: absent
  notify:
    - restart prosody
- name: Open ports
  ufw:
    rule: allow
    port: xmpp-client
    proto: tcp
  when: ansible_virtualization_type == "virtualbox"
  tags: [ufw]
...