tor-formula/tor/config.sls

{%- from "tor/map.jinja" import map with context -%}

include:
  - tor.install

deploy_tor_torrc:
  file.managed:
    - name: {{ map.config_torrc }}
    - source: salt://{{ slspath }}/files/ini.jinja
    - user: root
    - group: root
    - mode: 644
    - template: jinja
    - defaults:
      config: {{ map.torrc }}
    - require:
      - pkg: install_tor
    - watch_in:
      - service: install_tor

{%- if salt['pillar.get']('tor:ed25519_signing_cert', False) %}
deploy_tor_signing_cert:
  file.decode:
    - name: {{ map.torrc.DataDirectory }}/keys/ed25519_signing_cert
    - contents_pillar: tor:ed25519_signing_cert
    - encoding_type: base64
    - watch_in:
      - service: install_tor

set_owner_tor_signing_cert:
  file.managed:
    - name: {{ map.torrc.DataDirectory }}/keys/ed25519_signing_cert
    - user: tor
    - group: tor
    - mode: 600
    - require:
      - file: deploy_tor_torrc
      - file: deploy_tor_signing_cert
    - watch_in:
      - service: install_tor
{%- endif %}

{%- if salt['pillar.get']('tor:ed25519_signing_secret_key', False) %}
deploy_tor_signing_secret_key:
  file.decode:
    - name: {{ map.torrc.DataDirectory }}/keys/ed25519_signing_secret_key
    - contents_pillar: tor:ed25519_signing_secret_key
    - encoding_type: base64
    - watch_in:
      - service: install_tor

set_owner_tor_signing_secret_key:
  file.managed:
    - name: {{ map.torrc.DataDirectory }}/keys/ed25519_signing_secret_key
    - user: tor
    - group: tor
    - mode: 600
    - require:
      - file: deploy_tor_torrc
      - file: deploy_tor_signing_secret_key
    - watch_in:
      - service: install_tor
{%- endif %}

{%- if salt['pillar.get']('tor:ed25519_master_id_secret_key', False) %}
deploy_tor_master_id_secret_key:
  file.decode:
    - name: {{ map.torrc.DataDirectory }}/keys/ed25519_master_id_secret_key
    - contents_pillar: tor:ed25519_master_id_secret_key
    - encoding_type: base64
    - watch_in:
      - service: install_tor

set_owner_tor_master_id_secret_key:
  file.managed:
    - name: {{ map.torrc.DataDirectory }}/keys/ed25519_master_id_secret_key
    - user: tor
    - group: tor
    - mode: 600
    - require:
      - file: deploy_tor_torrc
      - file: deploy_tor_master_id_secret_key
    - watch_in:
      - service: install_tor
{%- endif %}

{%- if salt['pillar.get']('tor:ed25519_master_id_public_key', False) %}
deploy_tor_master_id_public_key:
  file.decode:
    - name: {{ map.torrc.DataDirectory }}/keys/ed25519_master_id_public_key
    - contents_pillar: tor:ed25519_master_id_public_key
    - encoding_type: base64
    - watch_in:
      - service: install_tor

set_owner_tor_master_id_public_key:
  file.managed:
    - name: {{ map.torrc.DataDirectory }}/keys/ed25519_master_id_public_key
    - user: tor
    - group: tor
    - mode: 600
    - require:
      - file: deploy_tor_torrc
      - file: deploy_tor_master_id_public_key
    - watch_in:
      - service: install_tor
{%- endif %}

{%- if salt['pillar.get']('tor:secret_id_key', False) %}
deploy_tor_secret_id_key:
  file.managed:
    - name: {{ map.torrc.DataDirectory }}/keys/secret_id_key
    - contents_pillar: tor:secret_id_key
    - user: tor
    - group: tor
    - mode: 600
    - require:
      - file: deploy_tor_torrc
    - watch_in:
      - service: install_tor
{%- endif %}

{%- if salt['pillar.get']('tor:fingerprint', False) %}
deploy_tor_fingerprint:
  file.managed:
    - name: {{ map.torrc.DataDirectory }}/fingerprint
    - contents_pillar: tor:fingerprint
    - user: tor
    - group: tor
    - mode: 600
    - require:
      - file: deploy_tor_torrc
    - watch_in:
      - service: install_tor
{%- endif %}