mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
74 lines
2.5 KiB
Plaintext
74 lines
2.5 KiB
Plaintext
##### Primary configuration settings #####
|
|
##########################################
|
|
# This configuration file is used to manage the behavior of the Salt Master.
|
|
# Values that are commented out but have an empty line after the comment are
|
|
# defaults that do not need to be set in the config. If there is no blank line
|
|
# after the comment then the value is presented as an example and is not the
|
|
# default.
|
|
|
|
# The user under which the salt master will run. Salt will update all
|
|
# permissions to allow the specified user to run the master. The exception is
|
|
# the job cache, which must be deleted if this user is changed. If the
|
|
# modified files cause conflicts, set verify_env to False.
|
|
# user: socore
|
|
|
|
log_file: /opt/so/log/salt/master
|
|
log_level_logfile: info
|
|
log_level: info
|
|
|
|
##### File Server settings #####
|
|
##########################################
|
|
# Salt runs a lightweight file server written in zeromq to deliver files to
|
|
# minions. This file server is built into the master daemon and does not
|
|
# require a dedicated port.
|
|
|
|
# The file server works on environments passed to the master, each environment
|
|
# can have multiple root directories, the subdirectories in the multiple file
|
|
# roots cannot match, otherwise the downloaded files will not be able to be
|
|
# reliably ensured. A base environment is required to house the top file.
|
|
# Example:
|
|
# file_roots:
|
|
# base:
|
|
# - /srv/salt/
|
|
# dev:
|
|
# - /srv/salt/dev/services
|
|
# - /srv/salt/dev/states
|
|
# prod:
|
|
# - /srv/salt/prod/services
|
|
# - /srv/salt/prod/states
|
|
#
|
|
file_roots:
|
|
base:
|
|
- /opt/so/saltstack/local/salt
|
|
- /opt/so/saltstack/default/salt
|
|
|
|
|
|
# The master_roots setting configures a master-only copy of the file_roots dictionary,
|
|
# used by the state compiler.
|
|
# master_roots: /opt/so/saltstack/salt-master
|
|
|
|
##### Pillar settings #####
|
|
##########################################
|
|
# Salt Pillars allow for the building of global data that can be made selectively
|
|
# available to different minions based on minion grain filtering. The Salt
|
|
# Pillar is laid out in the same fashion as the file server, with environments,
|
|
# a top file and sls files. However, pillar data does not need to be in the
|
|
# highstate format, and is generally just key/value pairs.
|
|
|
|
pillar_roots:
|
|
base:
|
|
- /opt/so/saltstack/local/pillar
|
|
- /opt/so/saltstack/default/pillar
|
|
|
|
peer:
|
|
.*:
|
|
- x509.sign_remote_certificate
|
|
|
|
reactor:
|
|
- 'so/fleet':
|
|
- salt://reactor/fleet.sls
|
|
- 'salt/beacon/*/watch_sqlite_db//opt/so/conf/kratos/db/sqlite.db':
|
|
- salt://reactor/kratos.sls
|
|
|
|
|