certificates_client:
  pkg.installed:
  - pkgs:
    - rsync

var_local_certificates_dir:
  file.directory:
    - name: /var/local/certificates
    - user: root
    - group: root
    - mode: 0700

certificates_key:
  file.managed:
    - name: /var/local/certificates/certificates_id_e25519
    - mode: 0600
    - contents_pillar: certificates:ssh_key

client_cron:
  file.managed:
    - name: /etc/cron.daily/certificates
    - source: salt://certificates/client_cron.daily
    - mode: '0755'