Module acme 

Admin surface for ACME-managed certificates: read-only status plus a “renew now” nudge. Configuration stays in system.yaml (restart-gated like every TLS setting), so there is deliberately no CRUD here. Responses never include key material — only what CertMeta records.

Functions

list_certs 🔒

GET /api/acme/certs — every managed certificate with state and metadata. {"enabled": false, "certs": []} when acme: is not configured, so the UI can tell “not configured” from “nothing managed” without a status-code guess.

renew_cert 🔒

POST /api/acme/certs/{id}/renew[?force=true] — nudges the renewal manager.

router