From 1a4e177d7c41f3e32ab2797157726d1f79f7c089 Mon Sep 17 00:00:00 2001
From: Jacob Coffee <jacob@z7x.org>
Date: Wed, 22 Oct 2025 12:55:37 -0400
Subject: [PATCH] move includes into salt-master only

---
 salt/base/salt.sls | 4 ++++
 salt/tls/init.sls  | 7 -------
 2 files changed, 4 insertions(+), 7 deletions(-)

diff --git a/salt/base/salt.sls b/salt/base/salt.sls
index 2915045e..003a46e0 100644
--- a/salt/base/salt.sls
+++ b/salt/base/salt.sls
@@ -68,6 +68,10 @@ salt-repo:
 {% if salt["match.compound"](pillar["roles"]["salt-master"]["pattern"]) %}
 include:
   - tls.lego
+  - tls.pebble
+
+certbot:
+  pkg.installed
 
 salt-master-pkg:
   pkg.latest:
diff --git a/salt/tls/init.sls b/salt/tls/init.sls
index 59071af4..3364afda 100644
--- a/salt/tls/init.sls
+++ b/salt/tls/init.sls
@@ -1,13 +1,6 @@
-include:
-  - .pebble
-  - .lego
-
 ssl-cert:
   pkg.installed
 
-certbot:
-  pkg.installed
-
 {% for name in salt["pillar.get"]("tls:ca", {}) %}  # " Syntax Hack
 /etc/ssl/certs/{{ name }}.pem:
   file.managed: