{% if ansible_distribution_release == "bullseye" %}

{% else %}

c2s_direct_tls_ssl = {

  protocol = "{{ xmpp_server_tls_protocol }}";

  ciphers = "{{ xmpp_server_tls_ciphers }}";

  -- @WORKAROUND: No DHE ciphers because dhparam is getting reset

  --

  --    There is a bug in Prosody 0.12.3 resulting in dhparam value

  --    from from global config getting ignored when domain SNI

  --    context is initalised on TCP port 5223. Define the parameter

  --    in within this configuration context as well to fix the issue.

  dhparam = "/etc/ssl/private/{{ ansible_fqdn }}_xmpp.dh.pem";

}

{% endif %}

{% if ansible_distribution_release == "bullseye" %}

{% else %}

c2s_direct_tls_ports = { 5223 }

{% endif %}