---
prosody_domain: "jabber.ccchb.de"
prosody_ssl_cert: "/etc/letsencrypt/live/{{ prosody_domain }}/fullchain.pem"
prosody_ssl_key: "/etc/letsencrypt/live/{{ prosody_domain }}/privkey.pem"
prosody_allow_registration: false
prosody_modules:
  - roster
  - saslauth
  - tls
  - dialback
  - disco
  - private
  - bookmarks
  - vcard
  - proxy65
  - legacyauth
  - version
  - uptime
  - time
  - ping
  - pep
  - register
  - adhoc
  - admin_adhoc
  - posix
  - bosh
  - websocket
  - groups
  - announce
  - watchregistrations
  - blocking
  - smacks
  - carbons
  - cloud_notify
  - csi
  - mam
  - filter_chatstates
  - throttle_presence
  - http_upload
  - turncredentials
  - vcard_legacy

prosody_nginx_install: true
prosody_nginx_conf: |
  listen [::]:443 ssl http2;
  listen 443 ssl http2;

  server_name {{ prosody_domain }};

  root /var/www/html;

  ssl_certificate {{ prosody_ssl_cert }};
  ssl_certificate_key {{ prosody_ssl_key }};
  ssl_trusted_certificate /etc/letsencrypt/live/{{ prosody_domain }}/chain.pem;

  include snippets/certbot.conf;
...