#!jinja|yaml|gpg

{%-
 set cache_url = salt['pillar.get'](
      'services:apt-cache',
      default=''
      )
%}

{%- 
 set os_rel = salt['pillar.get'](
     'os:release', 
     default=False
     )
%}

{%- if not os_rel %}
{% set os_rel = grains['oscodename'] %}
{%- endif %}


repo_default:
  file.managed:
    - name: /etc/apt/sources.list
    - contents: '#SALT managed, all in sources.list.d'
    - user: root
    - group: root
    - mode: 0600
    
{% if grains['os'] == 'Debian' %}

repo_debian:
  pkgrepo.managed:
    - name: 'deb http://{{ cache_url }}deb.debian.org/debian {{ os_rel }} main contrib non-free non-free-firmware'
    - file: /etc/apt/sources.list.d/debian.list
    - clean_file: True
    
{% if grains['oscodename'] == 'bullseye' %}}
repo_debian-updates:
  pkgrepo.managed:
    - name: 'deb http://{{ cache_url }}deb.debian.org/debian {{ os_rel }}-updates main contrib non-free non-free-firmware'
    - file: /etc/apt/sources.list.d/debian-updates.list
    - clean_file: True

#deb http://deb.debian.org/debian-security/ bullseye-security main contrib non-free
{% if os_rel == 'buster' %}
{% set repo_path = "/updates" %}
{% else %}
{% set repo_path = "-security" %}
{% endif %}

repo_debian-security:
  pkgrepo.managed:
    - name: 'deb http://{{ cache_url }}deb.debian.org/debian-security {{ os_rel }}{{ repo_path }} main contrib #non-free'
    - file: /etc/apt/sources.list.d/debian-security.list
    - clean_file: True

repo_debian-backports:
  pkgrepo.managed:
    - name: 'deb http://{{ cache_url }}deb.debian.org/debian {{ os_rel }}-backports main contrib #non-free'
    - file: /etc/apt/sources.list.d/debian-backports.list
    - clean_file: True
{% endif %}
{% endif %}