On Sun, 22 Jul 2018, Voytek Eymont wrote:
[...] so, basically, after each renewal of server's cert I should remember to reload Dovecot (and maybe Postfix too?)
You can add a hook (script) to /etc/letsencrypt/renewal-hooks/deply/ which restarts the services you need. In my case, I have /usr/sbin/apache2ctl graceful /usr/sbin/dovecot reload /usr/sbin/postfix reload This way the services pickup the renewed certificate when it is renewed.