From 65e34954f07dbb8098eac1164d699d9282a2146f Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Mon, 22 Mar 2021 19:51:52 +0000
Subject: [PATCH] thinlinc-server: Tighten up TLS settings

---
 roles/thinlinc-server/tasks/main.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/roles/thinlinc-server/tasks/main.yml b/roles/thinlinc-server/tasks/main.yml
index 090d58d..0b84175 100644
--- a/roles/thinlinc-server/tasks/main.yml
+++ b/roles/thinlinc-server/tasks/main.yml
@@ -94,6 +94,13 @@
     line: "login_page=https://{{ inventory_hostname }}/"
   notify: restart tlwebaccess
 
+- name: configure webaccess tls settings
+  lineinfile:
+    path: /opt/thinlinc/etc/conf.d/webaccess.hconf
+    regexp: "^gnutls_priority=.*"
+    line: "gnutls_priority=SECURE256"
+  notify: restart tlwebaccess
+
 - name: start thinlinc services
   service:
     name: "{{ item }}"