gistfile1.yml

ufw:
  pkg.installed

enable ufw:
  cmd.run:
    - name: ufw enable
    - require:
      - pkg: ufw

enable ssh:
  cmd.run:
    - name: ufw allow ssh
    - require:
      - pkg: ufw

{% if 'saltmaster' in grains['roles'] %}
allow salt:
  cmd.run:
    - name: ufw allow salt
    - require:
      - pkg: ufw
{% endif %}