roles/mail_certificates/letsencrypt/renewal-hooks/reload-mail-services.sh.j2

@@ -0,0 +1,6 @@
+#!/bin/sh
+{{ ansible_manged | comment }}
+# Reload Postcot and Dovecot after certificates are (re)generated
+
+systemctl reload postfix
+systemctl reload dovecot

roles/mail_certificates/tasks/main.yml

@@ -22,3 +22,16 @@
     dest: "/etc/letsencrypt/conf.d/{{ certbot.certname }}.ini"
     mode: 0644
   notify: Generate certificates
+
+- name: Make sure let's encrypt renewal-hooks exists
+  file:
+    path: /etc/letsencrypt/renewal-hooks/deploy
+    state: directory
+
+- name: Reload Postfix and Dovecot after certificate renewal
+  template:
+    src: letsencrypt/renewal-hooks/deploy/reload-mail-services.sh.j2
+    dest: /etc/letsencrypt/renewal-hooks/deploy/reload-mail-services.sh
+    mode: 0755
+
+# TODO: add motd