- name: copy dh param
  copy:
    src: "dh-{{ item }}.pem"
    dest: "/etc/ssl/dh-{{ item }}.pem"
  with_items:
    - 1024
    - 2048
    - 4096
    - 8192

- name: create link to default dh param
  file:
    src: /etc/ssl/dh-4096.pem
    dest: /etc/ssl/dhparams.pem
    owner: root
    group: root
    state: link
    mode: 0644