diff --git a/roles/xmpp_server/templates/prosody.cfg.lua.j2 b/roles/xmpp_server/templates/prosody.cfg.lua.j2
index d36bffae94817418b03be034d53adb0d7502611e..676a16940e14233fb72256a3914aa5fdcd6d673c 100644
--- a/roles/xmpp_server/templates/prosody.cfg.lua.j2
+++ b/roles/xmpp_server/templates/prosody.cfg.lua.j2
@@ -44,6 +44,7 @@ allow_registration = false;
 ssl = {
   key = "/etc/ssl/private/{{ ansible_fqdn }}_xmpp.key";
   certificate = "/etc/ssl/certs/{{ ansible_fqdn }}_xmpp.pem";
+  dhparam = "/etc/ssl/private/{{ ansible_fqdn }}_xmpp.dh.pem";
 }
 
 -- Ports on which to have direct TLS/SSL.