dehydrated:
  pkg.installed:
  - pkgs:
    - dehydrated
    - dnsutils

dehydrated_domains:
  file.managed:
    - name: /etc/dehydrated/domains.txt
    - source: salt://certificates/dehydrated/domains.txt
    - mode: '0644'

dehydrated_dnsapi:
  file.managed:
    - name: /etc/dehydrated/dnsapi.config.txt
    - source: salt://certificates/dehydrated/dnsapi.config.txt
    - mode: '0600'
    - template: jinja

dehydrated_mythic_dns01:
  file.recurse:
    - name: /etc/dehydrated/dehydrated-mythic-dns01
    - source: salt://certificates/dehydrated/dehydrated-mythic-dns01
    - dir_mode: '0755'
    - file_mode: '0755'
    - exclude_pat:
      - "debian*"
      - README.md

dehydrated_hooks:
  file.recurse:
    - name: /etc/dehydrated/conf.d
    - source: salt://certificates/dehydrated/conf.d
    - dir_mode: '0755'
    - file_mode: '0644'

dehydrated_cron:
  file.managed:
    - name: /etc/cron.daily/dehydrated
    - source: salt://certificates/dehydrated/cron.daily
    - mode: '0755'

dehydrated_logrotate:
  file.managed:
    - name: /etc/logrotate.d/dehydrated
    - source: salt://certificates/dehydrated/logrotate
    - mode: '0644'