# salt.pillar.nacl

Decrypt pillar data through the builtin NACL renderer

In most cases, you'll want to make this the last external pillar used. For example, to pair with the builtin stack pillar you could do something like this:

    nacl.config:
        keyfile: /root/.nacl

    ext_pillar:
      - stack: /path/to/stack.cfg
      - nacl: {}

Set `nacl.config` in your config.

salt.pillar.nacl.ext_pillar(minion_id, pillar, *args, **kwargs)