Upgrade DH param

         self.run("systemctl daemon-reload")
         self.run("service fcgiwrap restart")
 
-        self.generate_dhparam(512)  # NOTE 2048 adds ? minutes
+        self.generate_dhparam(2048)  # TODO upgrade to 4096
         self.run("service nginx restart")
 
     def generate_dhparam(self, bits=4096):