add restic env, firewall

users/init.sls

@@ -19,10 +19,13 @@
 {% if salt.pillar.get('manage_root_bashrc', False) %}
 /root/.bashrc:
   file.managed:
-    - source: 'salt://users/files/bashrc'
+    - source: 'salt://users/files/bashrc.jinja'
+    - template: jinja
     - user: root
     - group: root
-    - mode: 0644
+    - mode: 0640
+    - context:
+      bashrc_user: root
 {% endif %}
 
 #/root/.ssh/config:
@@ -35,6 +38,12 @@
 #    - require:
 #      - file: /root/.ssh
 
+{% for group in salt.pillar.get('sys_groups') %}
+{{ group }}:
+  group.present:
+    - system: True
+{% endfor %}
+
 {% for user, data in salt.pillar.get('users', {}).items() %}
 
 {{ user }}_user:
@@ -51,10 +60,11 @@
 {% if data.get('manage_bashrc', False) %}
 /home/{{ user }}/.bashrc:
   file.managed:
-    - source: 'salt://users/files/bashrc'
+    - source: 'salt://users/files/bashrc.jinja'
+    - template: jinja
     - user: {{ user }}
     - group: {{ user }}
-    - mode: 0644
+    - mode: 0640
     - require:
       - user: {{ user }}_user
 {% endif %}