Issue 4078 - Apply Nginx work-around for CVE-2015-4000

modules/nginx/templates/site.erb

 <% include_file = lambda do |url| %>
   <% content = Puppet::FileServing::Content.indirection.find(url) %>
   <% if content %>
     <%= content.content %>
   <% else %>
     <% raise StandardError, "Failed to resolve source URL #{url}" %>
   <% end %>
 <% end %>
 
 <% server_name = lambda do |domain, alt_names| %><%= domain %><% @alt_names.each do |name| %>, <%= name %><% end %><% end %>
@@ skipping 27 matching lines @@
     <% if is_default %>
       listen 443 ssl http2 default_server;
       listen [::]:443 ssl http2 default_server;
     <% else %>
       listen 443 ssl http2;
       listen [::]:443 ssl http2;
     <% end %>
 
     ssl_certificate <%= certificate %>;
     ssl_certificate_key <%= private_key %>;
+    ssl_dhparam /etc/nginx/dhparam.pem;
 
     add_header Strict-Transport-Security max-age=31536000;
 <% else %>
   server
   {
     server_name <% server_name[domain, alt_names] %>;
 
     <% if is_default %>
       listen 80 default_server;
       listen [::]:80 default_server;
@@ skipping 20 matching lines @@
 }
 
 <% if @content %>
   <%= content %>
 <% end %>
 
 <% if @source %>
   <% include_file[source] %>
 <% end %>
 }