apache2:
  pkg.installed:
    - pkgs:
      - apache2-mod_apparmor
      - apache2-prefork
  service.running:
    - enable: True

/etc/apache2/vhosts.d/countdown.opensuse.org.conf:
  file.managed:
    - listen_in:
      - service: apache2
    - source: salt://profile/countdown/files/apache-vhost.conf
    - template: jinja

sysconfig_apache2_countdown:
  file.replace:
    - name: /etc/sysconfig/apache2
    - pattern: ^APACHE_MODULES=.*$
    # original line:       "actions alias          auth_basic authn_file authz_host authz_groupfile authz_core authz_user autoindex cgi dir env expires include log_config mime negotiation setenvif ssl socache_shmcb userdir reqtimeout authn_core php7 rewrite"
    - repl: APACHE_MODULES="        alias apparmor auth_basic authn_file authz_host authz_groupfile authz_core authz_user autoindex     dir env expires include log_config mime negotiation setenvif     socache_shmcb         reqtimeout authn_core      rewrite remoteip status"
    - listen_in:
      - service: apache2



# This is handled in /etc/logrotate.d/apache2 since Leap 15.x (same/duplicate entry there)
# removing the file on newer Leap versions to avoid  errors in logrotate (duplicate entry...)
/etc/logrotate.d/apache2-vhosts:
{% if salt['grains.get']('osfullname') == "Leap" and salt['grains.get']('osmajorrelease')|int >= 15 %}
  file.absent
{% else %}
  file.managed:
    - source: salt://profile/wiki/files/apache2-wiki.logrotate
{% endif %}