feat(map): add create_init_cert_subcmd var

letsencrypt/defaults.yaml

@@ -31,6 +31,7 @@ letsencrypt:
   # more information, see: https://certbot.eff.org/docs/using.html#renewal
   post_renew:
     cmds: []
+  create_init_cert_subcmd: certonly
   cron:
     minute: random
     hour: random

letsencrypt/domains.sls

@@ -42,7 +42,7 @@
 create-initial-cert-{{ setname }}-{{ domainlist | join('+') }}:
   cmd.run:
     - unless: {{ check_cert_cmd }} {{ setname }}
-    - name: {{ create_cert_cmd }} certonly --quiet --cert-name {{ setname }} -d {{ domainlist|join(' -d ') }} --non-interactive
+    - name: {{ create_cert_cmd }} {{ letsencrypt.create_init_cert_subcmd }} --quiet --cert-name {{ setname }} -d {{ domainlist|join(' -d ') }} --non-interactive
       {% if not letsencrypt.use_package %}
     - cwd: {{ letsencrypt.cli_install_dir }}
       {% endif %}

pillar.example

@@ -15,6 +15,8 @@ letsencrypt:
   # have specific version of certbot you can enable it. The version value
   # should match a certbot/certbot branch.
   version: 0.30.x
+  # Subcommand used for certificates' first generation cmd ( run | certonly | renew )
+  create_init_cert_subcmd: certonly
   # Any parameter from the cli can be specified in the config file
   # check https://certbot.eff.org/docs/using.html#configuration-file
   config: