{% set grain_id = salt['grains.get']('id', '') %}

ssh:
  service:
    - running
    - restart: True
    - watch:
      - file: /etc/ssh/sshd_config
      - file: /etc/ssh/banner

/etc/ssh/sshd_config.{{ grains['id'] }}:
  file.managed:
    - name: /etc/ssh/sshd_config
    - user: root
    - group: root
    - mode: 644
    - source:
      - salt://ssh/sshd_config.{{ grains['id'] }}
      - salt://ssh/sshd_config.{{ grain_id }}
      - salt://ssh/sshd_config.generic

/etc/ssh/banner:
  file.managed:
    - user: root
    - group: root
    - mode: 644
    - source: salt://ssh/banner