Certbot discourages modifying files in /etc/letsencrypt/ as this can break things. However some services can not read the certificate and key files with their default permissions of being readable only by root. Also some services (e.g. Haproxy) can only use a combined pem file, and can not load individual cert, chain & key files.… Continue reading “Using Certbot –post-hook to configure Let’s Encrypt Certs for use by multiple services”