GetSSL certificate upload with sudo

getssl.cfg

DOMAIN_CHAIN_LOCATION="ssh:example.net:/home/yourusername/tmp.pem"
DOMAIN_KEY_LOCATION="ssh:example.net:/home/yourusername/tmp.key"
RELOAD_CMD="ssh example.net -- sudo /path/to/letsencrypt.sh"

letsencrypt.sh

#!/bin/bash
set -euf -o pipefail

DOMAIN_CHAIN_LOCATION=/home/yourusername/tmp.pem
DOMAIN_KEY_LOCATION=/home/yourusername/tmp.key
CHAIN_LOCATION=/etc/example/file.pem
KEY_LOCATION=/etc/example/file.key

if [[ ! -f "$DOMAIN_CHAIN_LOCATION" || ! -f "$DOMAIN_KEY_LOCATION" ]]
then echo "ERROR: Source files not found!" >&2; exit 1
elif [[ ! -f "$CHAIN_LOCATION" || ! -f "$KEY_LOCATION" ]]
then echo "ERROR: Destination files not found!" >&2; exit 1
fi

cat "$DOMAIN_KEY_LOCATION" > "$KEY_LOCATION"
cat "$DOMAIN_CHAIN_LOCATION" > "$CHAIN_LOCATION"
rm -f "$DOMAIN_CHAIN_LOCATION" "$DOMAIN_KEY_LOCATION"
logger -t "$(basename "$0")[$$]" "Certificate updated!"

systemctl reload your-services

sudoers

yourusername ALL = NOPASSWD: /path/to/letsencrypt.sh