include:
  - access.www-data

nginx:
  pkg:
    - latest
  file.managed:
    - name: /etc/nginx/nginx.conf
    - source: salt://nginx/files/nginx.jinja2
    - template: jinja
    - require:
      - pkg: nginx
  service.running:
    - enable: True
    - require:
      - pkg: nginx
      - user: www-data
    - watch:
      - file: /etc/nginx/nginx.conf
  iptables.append:
    - table: filter
    - chain: INPUT
    - jump: ACCEPT
    - match: state
    - connstate: NEW,ESTABLISHED
    - dport: 80
    - proto: tcp
    - sport: 1024:65535
    - save: True