Am 11.10.2018 um 11:05 schrieb Ignacio Garcia:

El jue., 11 oct. 2018 a las 10:58, Reio Remma (reio@mrstuudio.ee) escribió:

...

On 11/10/2018 11:55, Ignacio Garcia wrote:

...

Hi there. I've been using Dovecot for quite some time now but I just started using Let's Encrypt certs. Since LE certs are renewed automatically without user intervention I'm wondering if I will need to restart dovecot after that renewal...

A reload will suffice.

Thanks Reio for your quick answer.

Then is it that reload mandatory? What I need to know is if I dovecot can cope with that certificate renewal without the need of any sysadmin intervention or automated script after that renewal.

You can add a POST_HOOK to Certbot (or whatever you are using) to reload Dovecot after certificates have been renewed. No need for manual intervention.

-- Alex JOST

On Thu, 11 Oct 2018 12:39:07 +0200, Miloslav Hůla stated:

Dne 2018-10-11 v 10:55 Ignacio Garcia napsal(a):

...

Hi there. I've been using Dovecot for quite some time now but I just started using Let's Encrypt certs. Since LE certs are renewed automatically without user intervention I'm wondering if I will need to restart dovecot after that renewal...

Has anybody had any experience with that?

Thanks so much for your help!

Ignacio

From my experience, restart is required.

On Debian Strech, I edited cron job to:

certbot -q renew --renew-hook 'service dovecot restart' --renew-hook 'service postfix reload'

Milo

This works fine for me:

certbot renew --deploy-hook "service dovecot restart"

-- Jerry