diff --git a/roles/nginx/tasks/main.json b/roles/nginx/tasks/main.json
index 2d9e9ed..ca205e5 100644
--- a/roles/nginx/tasks/main.json
+++ b/roles/nginx/tasks/main.json
@@ -10,11 +10,10 @@
 		}
 	},
 	{
-		"name": "place dhparams file",
-		"become": true,
-		"ansible.builtin.copy": {
-			"src": "dhparam",
-			"dest": "/etc/nginx/dhparam"
+		"name": "generate dhparams file",
+		"ansible.builtin.command": "openssl dhparam -out /etc/nginx/dhparam 4096",
+		"args": {
+			"creates": "/etc/nginx/dhparam"
 		}
 	},
 	{