Saltfile

# Copyright 2021 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

salt-call:
  local: true
  config_dir: salt/config
  file_root: salt/file
  pillar_root: salt/pillar
  state_output: changes
  state_verbose: false

salt-run:
  config_dir: salt/config

salt-ssh:
  config_dir: salt/config
  ssh_max_procs: 100
  ssh_options:
  # Only use the control path of an existing connection. That way if salt-ssh
  # breaks sshd, there's a better chance that it will be possible to use the
  # existing connection to fix it.
  - KbdInteractiveAuthentication=no
  - PasswordAuthentication=no
  - PubkeyAuthentication=no
  ssh_priv: agent-forwarding  # Prevents salt from generating keys.
  state_output: changes
  state_verbose: false
  extra_filerefs:
  - salt://accounts/client/map.jinja
  - salt://accounts/map.jinja
  - salt://acme/map.jinja
  - salt://apache_httpd/map.jinja
  - salt://backup/map.jinja
  - salt://backup/repo/map.jinja
  - salt://backup/source/map.jinja
  - salt://common/map.jinja
  - salt://cron/map.jinja
  - salt://crypto/map.jinja
  - salt://crypto/x509/map.jinja
  - salt://cryptsetup/map.jinja
  - salt://ddns/map.jinja
  - salt://debian/map.jinja
  - salt://disk_usage/map.jinja
  - salt://flatpak/map.jinja
  - salt://gdm/map.jinja
  - salt://grub/map.jinja
  - salt://irc/bouncer/map.jinja
  - salt://log/syslog_ng/map.jinja
  - salt://mail/dkimpy_milter/map.jinja
  - salt://mail/dovecot/map.jinja
  - salt://mail/inbound/map.jinja
  - salt://mail/map.jinja
  - salt://mail/storage/map.jinja
  - salt://mail/web/map.jinja
  - salt://media_center/map.jinja
  - salt://mount/map.jinja
  - salt://nas/nfs/map.jinja
  - salt://nas/rsync/map.jinja
  - salt://network/firewall/map.jinja
  - salt://network/home_router/dns/map.jinja
  - salt://network/home_router/map.jinja
  - salt://news_aggregator/map.jinja
  - salt://nextcloud/map.jinja
  - salt://nginx/map.jinja
  - salt://php/map.jinja
  - salt://port_mux/map.jinja
  - salt://stunnel/map.jinja
  - salt://todo/map.jinja
  - salt://uptime/map.jinja
  - salt://vcs/map.jinja
  - salt://virtual_machine/guest/map.jinja
  - salt://virtual_machine/host/map.jinja
  - salt://xmpp/map.jinja