{{saltenv}}:
  '*':
    - salt
    - common
    - users
{% if salt.pillar.get('restic:client', None) is not none or
   if salt.pillar.get('restic:server', None) is not none %}
    - restic
{% endif %}
  '*.keiran.us':
    - firewall
    - resolvers
  'vps47492.inmotionhosting.com':
    - gitea
  'kpi.keiran.us':
    - icinga2
    - nginx
    - restic
    - samba