certbot cockpit deploy script

01-cockpit.sh

#!/usr/bin/env bash
DOMAIN=`basename "$RENEWED_LINEAGE"`
case $DOMAIN in
	host.example.com)
	echo "Host certs renewed"
	cp $RENEWED_LINEAGE/fullchain.pem /etc/cockpit/ws-certs.d/$DOMAIN.crt
	cp $RENEWED_LINEAGE/privkey.pem /etc/cockpit/ws-certs.d/$DOMAIN.key
	chown cockpit-ws:cockpit-ws /etc/cockpit/ws-certs.d/$DOMAIN.crt /etc/cockpit/ws-certs.d/$DOMAIN.key
	
	echo "Restarting Cockpit"
	systemctl restart cockpit
	;;
esac

README.md

This goes in /etc/letsencrypt/renewal-hooks/deploy/ and makes certbot-renewed certificates available for Cockpit (RHEL, Fedora, Oracle, AlmaLinux, Rocky).