Module certbot 

certbot / ACME certificate actions.

GetCertificates (certbot certificates) is read-only. ObtainCertificate and RenewCertificates run certbot directly (scoped argv). Every input is validated before it reaches certbot.

Network-gated: certbot is not on the base cloud image and ACME issuance needs outbound network + a DNS/HTTP challenge, so these could not be live-validated in the sandbox — only the argv construction (unit tests).

Functions

get_certificates

List managed certificates (certbot certificates). Read-only.

obtain_certificate

Obtain a certificate non-interactively. domains is a pre-validated list; challenge is one of standalone/nginx/apache (validated upstream).

renew_certificates

Renew all due certificates (certbot renew).

specs