enable_freeipa:
  grains.present:
    - name: freeipa_enabled
    - value: true
    - force: true

{% if grains['os_family'] == 'Arch' %}
include:
  - systems.core.freeipa
  - systems.core.freeipa.manual
{% else %}
include:
  - systems.core.freeipa.auto
{% endif %}