Method get_or_create_acme_client

gateway/src/distributed_certbot.rs:287–362

(
        &self,
        domain: &str,
        config: &ZtDomainConfig,
    )

    }

    async fn get_or_create_acme_client(
        &self,
        domain: &str,
        config: &ZtDomainConfig,
    ) -> Result<AcmeClient> {
        // Get DNS credential (from config or default)
        let dns_cred = if let Some(ref cred_id) = config.dns_cred_id {
            self.kv_store
                .get_dns_credential(cred_id)
                .context("specified DNS credential not found")?
        } else {
            self.kv_store
                .get_default_dns_credential()
                .context("no default DNS credential configured")?
        };

        // Create DNS client based on provider
        let dns01_client = match &dns_cred.provider {
            DnsProvider::Cloudflare { api_token, api_url } => {
                Dns01Client::new_cloudflare(domain.to_string(), api_token.clone(), api_url.clone())
                    .await?
            }
        };

        // Use ACME URL from certbot config, fall back to default if not set
        let config = self.config();
        let acme_url = if config.acme_url.is_empty() {
            DEFAULT_ACME_URL
        } else {
            &config.acme_url
        };

        // Try to load global ACME credentials from KvStore
        if let Some(creds) = self.kv_store.get_acme_credentials() {
            if acme_url_matches(&creds.acme_credentials, acme_url) {
                info!("loaded global ACME account credentials from KvStore");
                return AcmeClient::load(
                    dns01_client,
                    &creds.acme_credentials,
                    dns_cred.max_dns_wait,
                    dns_cred.dns_txt_ttl,
                )
                .await
                .context("failed to load ACME client from KvStore credentials");
            }
            warn!("ACME URL mismatch in KvStore credentials, will create new account");
        }

        // Create new global ACME account
        info!("creating new global ACME account at {acme_url}");
        let client = AcmeClient::new_account(
            acme_url,
            dns01_client,
            dns_cred.max_dns_wait,
            dns_cred.dns_txt_ttl,
        )
        .await
        .context("failed to create new ACME account")?;