Reverse Proxy - The Big Commit

salt/ssl/init.sls

@@ -63,6 +63,20 @@ fbcrtlink:
         bits: 4096
         backup: True
 
+# Create a cert for the reverse proxy
+/etc/pki/master.crt:
+  x509.certificate_managed:
+    - ca_server: {{ master }}
+    - signing_policy: master
+    - public_key: /etc/pki/master.key
+    - CN: {{ master }}
+    - days_remaining: 3000
+    - backup: True
+    - managed_private_key:
+        name: /etc/pki/master.key
+        bits: 4096
+        backup: True
+
 {% endif %}
 {% if grains['role'] == 'so-SENSOR' %}