# # The commented stuff will be exported from the UI once we set everything up there

#

# ipsilon_saml2_dir:

#   file.directory:

#     - name: /etc/ipsilon/saml2

#     - mode: 700

#     - user: ipsilon

# ipsilon_configuration_file:

#   file.managed:

#     - name: /etc/ipsilon/configuration.conf

#     - source: salt://profile/identification/files/configuration.conf

#     - template: jinja

#     - mode: 600

#     - require_in:

#       - service: id_apache_service

#     - watch_in:

#       - module: id_apache_restart

ipsilon_conf_file:

  file.managed:

    - name: /etc/ipsilon/ipsilon.conf

    - source: salt://profile/identification/files/ipsilon.conf

    - template: jinja

    - mode: 600

    - require_in:

      - service: id_apache_service

    - watch_in:

      - module: id_apache_restart

/var/lib/ipsilon/ipsilon.conf:

  file.symlink:

    - target: /etc/ipsilon/ipsilon.conf

# ipsilon_oidc_conf_file:

#   file.managed:

#     - name: /etc/ipsilon/openidc.static.cfg

#     - source: salt://profile/identification/files/openidc.static.cfg

#     - mode: 600

#     - require_in:

#       - service: id_apache_service

#     - watch_in:

#       - module: id_apache_restart

# /etc/ipsilon/openidc.key:

#   file.managed:

#     - contents_pillar: profile:identification:openidc_priv_key

#     - mode: 600

#     - user: ipsilon

# /etc/ipsilon/saml2/idp.key:

#   file.managed:

#     - contents_pillar: profile:identification:saml2_priv_key

#     - mode: 600

#     - user: ipsilon

# /etc/ipsilon/saml2/idp.crt:

#   file.managed:

#     - contents_pillar: profile:identification:saml2_pub_key

#     - mode: 644

#     - user: ipsilon