---
# vim: set et sw=2 ts=2 sts=2:

- name: TLS directories
  file:
    state: directory
    path: '{{item}}'
    mode: 0755
    owner: root
  with_items:
  - /etc/postfix/tls
  - /etc/dovecot/tls
- name: DHs for Postfix
  community.crypto.openssl_dhparam:
    path: '/etc/postfix/tls/mail_{{item}}.dh'
    size: '{{item}}'
    owner: root
    mode: 0400
  with_items: [512,2048,4192]
- name: DHs for Dovecot
  community.crypto.openssl_dhparam:
    path: '/etc/dovecot/tls/mail_{{item}}.dh'
    size: '{{item}}'
    owner: dovecot
    mode: 0400
  with_items: [512,2048,4192]