add salt unit files, fix master inside nat

salt/files/minion.jinja

@@ -1,5 +1,11 @@
+{% if grains.ip4_gw == '192.168.1.1' %}
 master: 192.168.1.9
+{% else %}
+master: kpi.keiran.us
+{% endif %}
+pillar_raise_on_missing: True
 state_output: changes
-log_level: error
+log_level: warning
 grains_cache: True
+pillar_merge_lists: True
 mysql.default_file: '/root/.my.cnf'

salt/files/salt-master.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=The Salt Master Server
+After=network.target
+
+[Service]
+LimitNOFILE=100000
+Type=notify
+NotifyAccess=all
+ExecStart=/usr/local/bin/salt-master
+
+[Install]
+WantedBy=multi-user.target

salt/files/salt-minion.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=The Salt Minion
+After=network.target salt-master.service
+
+[Service]
+KillMode=process
+Type=notify
+NotifyAccess=all
+LimitNOFILE=8192
+ExecStart=/usr/local/bin/salt-minion
+
+[Install]
+WantedBy=multi-user.target

salt/master.sls

@@ -1,3 +1,6 @@
+include:
+  - salt.update
+  - salt.minion
 
 /etc/salt/master:
   file.managed:
@@ -7,3 +10,23 @@
     - group: root
     - mode: 644
 
+/lib/systemd/system/salt-master.service:
+  file.managed:
+    - source: salt://salt/files/salt-master.service
+    - user: root
+    - group: root
+    - mode: 644
+
+systemd reload for salt-master:
+  cmd.run:
+    - name: systemctl daemon-reload
+    - onchanges:
+      - file: /lib/systemd/system/salt-master.service
+
+salt-master:
+  service.running:
+    - enable: true
+    - require:
+      - file: /lib/systemd/system/salt-minion.service
+      - cmd: systemd reload for salt-master
+

salt/minion.sls

@@ -1,7 +1,29 @@
+include:
+  - salt.update
+
+/lib/systemd/system/salt-minion.service:
+  file.managed:
+    - source: salt://salt/files/salt-minion.service
+    - user: root
+    - group: root
+    - mode: 644
+
+systemd reload for salt-minion:
+  module.run:
+    - name: service.systemctl_reload
+    - onchanges:
+      - file: /lib/systemd/system/salt-minion.service
+
+salt-minion:
+  service.running:
+    - enable: true
+    - require:
+      - file: /lib/systemd/system/salt-minion.service
+      - module: systemd reload for salt-minion
 
 /etc/salt/minion:
   file.managed:
-    - source: 'salt://salt/files/minion.jinja'
+    - source: salt://salt/files/minion.jinja
     - template: jinja
     - user: root
     - group: root

salt/update.sls

@@ -0,0 +1,4 @@
+salt:
+  pip.installed:
+    - user: root
+    - upgrade: true