dmarc:
  user.present:
    - fullname: 'DMARC reports'
    - home: /home/dmarc
    - shell: /usr/sbin/nologin
    - system: True
    - usergroup: True
    - password: '{{ salt['pillar.get']('dmarcts:user_pw', '') }}'
    - hash_password: True
    - enforce_password: False

dmarcts:
  pkg.installed:
    - name: dmarcts-report-parser
  mysql_user.present:
    - name: dmarcts
    - password: '{{ salt['pillar.get']('dmarcts:mariadb_pw', '') }}'
  mysql_database.present:
    - name: dmarcts
  mysql_grants.present:
    - grant: all privileges
    - database: dmarcts.*
    - user: dmarcts

/etc/dmarcts-report-parser.conf:
  file.managed:
    - source: salt://dmarcts-report-parser/dmarcts-report-parser.conf
    - template: jinja
    - user: dmarc
    - group: dmarc
    - mode: 600