salt/files/_api.conf

{%- from "linux/map.jinja" import system with context %}
{%- from "salt/map.jinja" import api with context %}

rest_cherrypy:
  port: {{ api.bind.port }}
  host: {{ api.bind.address }}
  {%- if api.get('ssl', {}).get('enabled', False) %}
  {%- if api.ssl.engine == 'letsencrypt' %}
  ssl_crt: /etc/letsencrypt/live/{{ api.ssl.name }}/cert.pem
  ssl_key: /etc/letsencrypt/live/{{ api.ssl.name }}/privkey.pem
  {%- elif api.ssl.engine == 'salt' %}
  ssl_crt: /etc/ssl/certs/{{ system.name }}.{{ system.domain }}.crt
  ssl_key: /etc/ssl/private/{{ system.name }}.{{ system.domain }}.key
  {%- else %}
  ssl_crt: {{ api.ssl.get('cert_file')|default("/etc/ssl/certs/"+grains.get('fqdn')+".crt") }}
  ssl_key: {{ api.ssl.get('key_file')|default("/etc/ssl/private/"+grains.get('fqdn')+".key") }}
  {%- endif %}
  {%- else %}
  disable_ssl: True
  {%- endif %}
  expire_responses: {{ api.get('expire_responses', False) }}
  {%- if api.get('debug', False) %}
  debug: True
  {%- endif %}
{#-
  vim: syntax=jinja
-#}