salt-common/sls/users/init.sls

{% set users_present = salt['pillar.get']('users:present', {})%}
{% set users_present_list = users_present.keys() %}
{% set users_absent = salt['pillar.get']('users:absent', [])%}

{% for username, data in users_present.items() %}
{% set homedir = data.get('home', '/home/' + username) %}
{{ username }}_user:
  user.present:
    - name: {{ username }}
    - fullname: {{ data.get('fullname', '') }}
    - system: {{ data.get('system', False) }}
    {% if data.get('uid', False) != False %}
    - uid: {{ data['uid'] }}
    {% endif %}
    {% if data.get('gid', False) != False %}
    - gid: {{ data['gid'] }}
    {% endif %}
    - home: "{{ homedir }}"
    - createhome: {{ data.get('createhome', True) }}
    - shell: "{{ data.get('shell', '/bin/bash') }}"
    - password: "{{ data.get('passwd', '') }}"
    - groups: {{ data.get('groups', []) }}
    - optional_groups: {{ data.get('optional_groups', []) }}

{% if data.get('keys', False) %}
{{ homedir }}/.ssh:
  file.directory:
    - create: True
    - mode: 700
    - user: {{ username }}
    - require:
      - user: {{ username }}

{{ homedir }}/.ssh/authorized_keys:
  file.managed:
    - source: salt://users/files/authorized_keys.tpl
    - template: jinja
    - context:
        user: {{ username }}
    - mode: 600
    - user: {{ username }}
    - require:
      - file: {{ homedir }}/.ssh
{% endif %}
{% endfor %}

{% for user in users_absent %}
{% if user not in users_present_list %}
{{ user }}:
  user.absent:
    - purge: True
{% endif %}
{% endfor %}

{% for groupname, data in salt['pillar.get']('groups:present', {}).items() %}
{{ groupname }}_user:
  group.present:
    - name: {{ groupname }}
    {% if data.get('gid', False) != False %}
    - gid: {{ data['gid'] }}
    {% endif %}
{% endfor %}