On 11.09.2017 10:59, Gary wrote:
As you know, letsencrypt certs can be automatically updated. However,
you need to reload/restart Postfix/Dovecot to use the new cert. My
email client insisted I had an expired cert. I couldn't download or
send email. (Fortunately I'm on a test domain, getting ready for the
Oct 1st Google insistence on encryption.)
Letsencrypt suggests running acme on a daily basis, so just do the
same for Postfix and Dovecot.
I use acme client dehydrated
https://github.com/lukas2511/dehydrated
There you have the options of a hook to restart services after
certificate renew
Works like a charm ;)