ssl:
  us-west-2:
    dhparam:
      data: |
        -----BEGIN DH PARAMETERS-----




{% import '_grains/map.jinja' as grain %}
{% from 'ssl/map.jinja' import ssl with context %}

ssl_dhparam_file:
  file.managed:
    - name: {{ ssl.config.dir }}/{{ ssl.dhparam.file }}
    - user: root
    - group: root
    - mode: 0644
    - template: jinja
    - contents_pillar: ssl:{{ grain.region }}:dhparam:data