bookworm_backports:
  pkgrepo.managed:
    - name: deb http://deb.debian.org/debian bookworm-backports main
    - dist: bookworm-backports
    - file: /etc/apt/sources.list.d/bookworm-backports.list

deploy_sshd_config:
  file.managed:
    - name: /etc/ssh/sshd_config
    - source: salt://debian/sshd_config

ssh:
  service.running:
    - watch:
      - file: /etc/ssh/sshd_config

cron:
  pkg.installed: []
  service.running:
    - require:
      - pkg: cron

ntp:
  pkg.installed: []
  service.running:
    - require:
      - pkg: ntp

firewalld:
  pkg.installed: []
  service.running:
    - enable: true
    - restart: true

unattended-upgrades:
  pkg.installed