Interactions with NGINX and other web services

[alexander-bauer]

When I'm developing my environment, I often add new services, nginx rules, and letsencrypt rules simultaneously. Depending on the order of the states, the letsencrypt rules may run before the new nginx site is added, causing the state to fail, so it must be run again. Furthermore, nginx may have to be restarted to use the new certificate.

Is there a clean way to add these require and watch statements without tightly coupling this formula to other states?

[fpytloun]

Currently there's no straightforward way and it's prefered to run states multiple times than to introduce complex relationships that may or may not work.

Instead you can use Salt Orchestrate, there's experimental way how to define relationships across formulas (see meta/salt.yml) that should be able to generate orchestrate files (using salt-formula-salt) or you can run orchestrate files on your own to orchestrate deployment of your changes, etc.

[pankajghadge]

Will it be possible to add --renew-hook "/usr/local/bin/renew.sh" something like that to restart the services like haproxy or nginx or apache
Also it will be grate if you add --pre-hook and --post-hook support, so that somebody can stop the haproxy ,nginx or apache server and let the certbot start a standalone webserver for authentication

[fpytloun]

Support for hooks seems to be easy way how to solve this 👍
Any volunteers for pull request? :-)