Do not ignore errors when generating DH parameters
authorJamie Nguyen <j@jamielinux.com>
Fri, 22 May 2015 06:05:51 +0000 (07:05 +0100)
committerJamie Nguyen <j@jamielinux.com>
Fri, 22 May 2015 06:05:51 +0000 (07:05 +0100)
templates/web.ssl.template.yml

index 9c6be46c409c5e7b2c354dd4930b379209fcffab..3a7a4d59b56b79c57778ae4ece7580c6e54037a2 100644 (file)
@@ -3,7 +3,7 @@ run:
      cmd:
        # Generate strong Diffie-Hellman parameters
        - "mkdir -p /shared/ssl/"
-       - "[ ! -e /shared/ssl/dhparams.pem ] && openssl dhparam -out /shared/ssl/dhparams.pem 2048 || true"
+       - "[ ! -e /shared/ssl/dhparams.pem ] && openssl dhparam -out /shared/ssl/dhparams.pem 2048"
   - replace:
      filename: "/etc/nginx/conf.d/discourse.conf"
      from: /server.+{/