diff --git a/defaults/main.yml b/defaults/main.yml
index 05a7c86..b94112a 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -115,7 +115,7 @@ nginx_load_modules: []
 #
 nginx_dh: null
 nginx_dh_path: '{{ nginx_ssl_dir }}/dhparam.pem'
-nginx_dh_length: 4096
+nginx_dh_length: 2048
 
 #
 # acme.sh