From a733778d0d142aededabcb07d40fbedd15833e93 Mon Sep 17 00:00:00 2001
From: Olav Reinert <seroton10@gmail.com>
Date: Nov 07 2021 17:08:41 +0000
Subject: mailserver: ensure TLS certificates exist


---

diff --git a/salt/profile/mailserver/init.sls b/salt/profile/mailserver/init.sls
index 5729ba8..5459168 100644
--- a/salt/profile/mailserver/init.sls
+++ b/salt/profile/mailserver/init.sls
@@ -11,6 +11,17 @@
     - watch_in:
       - service: postfix
 
+{% for crt in [
+  'star_opensuse_org_ecdsa_letsencrypt.crt',
+  'star_opensuse_org_ecdsa_letsencrypt_key.pem',
+  'star_opensuse_org_rsa_letsencrypt.crt',
+  'star_opensuse_org_rsa_letsencrypt_key.pem',
+  'LetsEncryptCA_chain.crt'
+] %}
+/etc/postfix/{{crt}}:
+  file.exists
+{% endfor %}
+
 {% for file in [
   'handling_special_recipients',
   'no-internal-tls',