{% for tunnel,tunnel_data in salt['pillar.get']('ts:tunnels', {}).iteritems() %}

/etc/systemd/system/{{ tunnel }}.service:
  file:
    - managed
    - source: salt://modules/ssh-tunnel/files/tunnel-systemd.tmpl
    - template: jinja
    - context:
      tunnel_name: {{ tunnel }}
      gateway_user: {{ tunnel_data['gateway_user'] }}
      gateway_host: {{ tunnel_data['gateway_host'] }}
      gateway_port: {{ tunnel_data['gateway_port'] }}
      tunnel_host: {{ tunnel_data['tunnel_host'] }}
      tunnel_port: {{ tunnel_data['tunnel_port'] }}
      {% if tunnel_data['listen_public'] %}
      local_host: {{ salt['grains.get']('ip4_interfaces:eth0')[0] }
      local_port: {{ tunnel_data['local_port'] }}
      {% endif %}
    - user: root
    - group: root
    - mode: 0644

{{ tunnel }}:
  service:
    - enable: True
    - running
{% endfor %}