Georg Pfuetzenreuter
f6e9063626
After the original fork I tried to keep minimal Debian support, but it became clear that I will never test and maintain it - removing the relevant bits makes more sense than keeping possibly dead code. Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
154 lines
3.6 KiB
Plaintext
154 lines
3.6 KiB
Plaintext
{% from "tor/map.jinja" import map with context %}
|
|
|
|
include:
|
|
- tor.install
|
|
|
|
deploy_tor_torrc:
|
|
file.managed:
|
|
- name: {{ map.config_torrc }}
|
|
- source: salt://{{ slspath }}/files/ini.jinja
|
|
- user: root
|
|
- group: root
|
|
- mode: 644
|
|
- template: jinja
|
|
- defaults:
|
|
config: {{ map.torrc }}
|
|
- require:
|
|
- pkg: install_tor
|
|
- watch_in:
|
|
- service: install_tor
|
|
|
|
{% if salt['pillar.get']('tor:ed25519_signing_cert', False) %}
|
|
|
|
deploy_tor_signing_cert:
|
|
file.decode:
|
|
- name: {{ map.torrc.DataDirectory }}/keys/ed25519_signing_cert
|
|
- contents_pillar: tor:ed25519_signing_cert
|
|
- encoding_type: base64
|
|
- watch_in:
|
|
- service: install_tor
|
|
|
|
set_owner_tor_signing_cert:
|
|
file.managed:
|
|
- name: {{ map.torrc.DataDirectory }}/keys/ed25519_signing_cert
|
|
- user: tor
|
|
- group: tor
|
|
- mode: 600
|
|
- require:
|
|
- file: deploy_tor_torrc
|
|
- file: deploy_tor_signing_cert
|
|
- watch_in:
|
|
- service: install_tor
|
|
|
|
{% endif %}
|
|
|
|
|
|
{% if salt['pillar.get']('tor:ed25519_signing_secret_key', False) %}
|
|
|
|
deploy_tor_signing_secret_key:
|
|
file.decode:
|
|
- name: {{ map.torrc.DataDirectory }}/keys/ed25519_signing_secret_key
|
|
- contents_pillar: tor:ed25519_signing_secret_key
|
|
- encoding_type: base64
|
|
- watch_in:
|
|
- service: install_tor
|
|
|
|
set_owner_tor_signing_secret_key:
|
|
file.managed:
|
|
- name: {{ map.torrc.DataDirectory }}/keys/ed25519_signing_secret_key
|
|
- user: tor
|
|
- group: tor
|
|
- mode: 600
|
|
- require:
|
|
- file: deploy_tor_torrc
|
|
- file: deploy_tor_signing_secret_key
|
|
- watch_in:
|
|
- service: install_tor
|
|
|
|
{% endif %}
|
|
|
|
|
|
{% if salt['pillar.get']('tor:ed25519_master_id_secret_key', False) %}
|
|
|
|
deploy_tor_master_id_secret_key:
|
|
file.decode:
|
|
- name: {{ map.torrc.DataDirectory }}/keys/ed25519_master_id_secret_key
|
|
- contents_pillar: tor:ed25519_master_id_secret_key
|
|
- encoding_type: base64
|
|
- watch_in:
|
|
- service: install_tor
|
|
|
|
set_owner_tor_master_id_secret_key:
|
|
file.managed:
|
|
- name: {{ map.torrc.DataDirectory }}/keys/ed25519_master_id_secret_key
|
|
- user: tor
|
|
- group: tor
|
|
- mode: 600
|
|
- require:
|
|
- file: deploy_tor_torrc
|
|
- file: deploy_tor_master_id_secret_key
|
|
- watch_in:
|
|
- service: install_tor
|
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
{% if salt['pillar.get']('tor:ed25519_master_id_public_key', False) %}
|
|
|
|
deploy_tor_master_id_public_key:
|
|
file.decode:
|
|
- name: {{ map.torrc.DataDirectory }}/keys/ed25519_master_id_public_key
|
|
- contents_pillar: tor:ed25519_master_id_public_key
|
|
- encoding_type: base64
|
|
- watch_in:
|
|
- service: install_tor
|
|
|
|
set_owner_tor_master_id_public_key:
|
|
file.managed:
|
|
- name: {{ map.torrc.DataDirectory }}/keys/ed25519_master_id_public_key
|
|
- user: tor
|
|
- group: tor
|
|
- mode: 600
|
|
- require:
|
|
- file: deploy_tor_torrc
|
|
- file: deploy_tor_master_id_public_key
|
|
- watch_in:
|
|
- service: install_tor
|
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
{% if salt['pillar.get']('tor:secret_id_key', False) %}
|
|
deploy_tor_secret_id_key:
|
|
file.managed:
|
|
- name: {{ map.torrc.DataDirectory }}/keys/secret_id_key
|
|
- contents_pillar: tor:secret_id_key
|
|
- user: tor
|
|
- group: tor
|
|
- mode: 600
|
|
- require:
|
|
- file: deploy_tor_torrc
|
|
- watch_in:
|
|
- service: install_tor
|
|
{% endif %}
|
|
|
|
|
|
|
|
{% if salt['pillar.get']('tor:fingerprint', False) %}
|
|
deploy_tor_fingerprint:
|
|
file.managed:
|
|
- name: {{ map.torrc.DataDirectory }}/fingerprint
|
|
- contents_pillar: tor:fingerprint
|
|
- user: tor
|
|
- group: tor
|
|
- mode: 600
|
|
- require:
|
|
- file: deploy_tor_torrc
|
|
- watch_in:
|
|
- service: install_tor
|
|
{% endif %}
|
|
|
|
|