iljur And yes, maybe a script executed as caddy-user is (and should) not be able to restart any containers after copying the certs.
So the cronjob way like proposed in mailcow docs seems like the proper way to go.
@Admins: Please feel free to edit/delete my comments.