Suricata Salt Module - Add updated salt states

salt/suricata/init.sls

@@ -14,33 +14,37 @@
 #    along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
 # Suricata
-ppdir:
+suridir:
   file.directory:
-    - name: /opt/so/pulledpork
+    - name: /opt/so/conf/suricata
-    - user: 939
+    - user: 940
-    - group: 939
+    - group: 940
 
-rulesdir:
+suriruledir:
   file.directory:
-    - name: /opt/so/rules/nids
+    - name: /opt/so/conf/suricata/rules
-    - user: 939
+    - user: 940
-    - group: 939
+    - group: 940
     - makedirs: True
 
-ruleslink:
+surirulesync:
-  file.symlink:
+  file.recurse:
-    - name: /opt/so/saltstack/salt/pulledpork/rules
+    - name: /opt/so
-    - target: /opt/so/rules/nids
 
-toosmooth/so-pulledpork:test2:
+suriconfigsync:
-  docker_image.present
+  file.recurse:
+    - name: /opt/so/conf/suricata
+    - source: salt://pulledpork/rules
+    - user: 940
+    - group: 940
 
-so-pulledpork:
+so-suricata:
   docker_container.running:
-    - image: toosmooth/so-pulledpork:test2
+    - image: toosmooth/so-suricata:test2
-    - hostname: so-pulledpork
+    - hostname: so-suricata
-    - user: socore
+    - user: suricata
+    - priviledged: True
     - binds:
-      - /opt/so/pulledpork/etc:/opt/pulledpork/etc:ro
+      - /opt/so/suricata/conf/rules:/usr/local/etc/suricata/rules:ro
       - /opt/so/rules/nids:/opt/so/rules/nids:rw
-    - network_mode: so-elastic-net
+    - network_mode: host