salt/base/admin/init.sls

{% import "globals.jinja" as globals %}

include:
  - admin.ca
  - admin.certbot
  - saltstack.master

/data/admin:
  file.directory:
    - mode: 700
    - require:
      - file: /data

{% for subdir in [
  'pillar',
  'pki',
  'salt',
  'salt-modules',
] %}
/data/admin/{{ subdir }}:
  file.directory:
    - mode: 700
    - require:
      - file: /data/admin
{% endfor %}

admin_bashrc:
  file.append:
    - name: /root/.bashrc
    - text:
      - alias salt='salt -t60'

/root/.ssh:
  file.directory:
    - mode: 700

/root/.ssh/id_rsa:
  file.managed:
    - mode: 600
    - contents_pillar: admin:ssh:id_rsa
    - require:
      - file: /root/.ssh

/root/.ssh/id_rsa.pub:
  file.managed:
    - mode: 644
    - contents_pillar: admin:ssh:id_rsa_pub
    - require:
      - file: /root/.ssh