On: Dehydrated: Letsencrypt/acme client implemented as a shell-script

[_ugfj]

I mount webserver docroot and /etc/letsencrypt directories into the certbot container, /docroot and /etc/letsencrypt mount points respectively, it is totally prepared for this.

[9dev → _ugfj]

How did you implement reloading the modified TLS certificates after renewal tho?

[_ugfj → 9dev]

it's a two line script running periodically. the first line is docker the second is nginx -s reload. As /etc/letsencrypt dir is mounted from nginx into certbot, certbot upgrades that, nginx reload picks them up. Easy as pie.