---
prosody_domain: "jabber.ccchb.de"
prosody_ssl_cert: "/etc/prosody/certs/fullchain.pem"
prosody_ssl_key: "/etc/prosody/certs/privkey.pem"
prosody_allow_registration: false

prosody_http_url: "https://jabber.ccchb.de/"
prosody_turn_server: "einstein.cskreie.de"
prosody_turn_secret: "gabbagabbahey"

prosody_nginx_install: true
prosody_nginx_conf: |
  listen [::]:443 ssl http2;
  listen 443 ssl http2;

  server_name {{ prosody_domain }};

  root /var/www/html;

  ssl_certificate {{ prosody_ssl_cert }};
  ssl_certificate_key {{ prosody_ssl_key }};
  ssl_trusted_certificate /etc/letsencrypt/live/{{ prosody_domain }}/chain.pem;

  include snippets/certbot.conf;
...