The renew verb doesn’t like domains being specified directly via command-line flags or via cli.ini. Basically, it looks at all your certificates and renews them if needed. This could conflict with domains you specify manually, that’s why it’s not supported.
You have two options:
- Implement renewal with
certonlyand--keep-until-expiring. You can put that in a daily cronjob and it will only replace your certificate when they’re about to expire (30 days). - Remove the
domainsline from yourcli.iniand userenew.- If you ever need to expand your certificates with additional domains, add the line back temporarily and add any new domains, or pass it to the client via
-d.
- If you ever need to expand your certificates with additional domains, add the line back temporarily and add any new domains, or pass it to the client via