fix: sync after failing renewal

certbotd.sh

@@ -64,13 +64,16 @@ case $1 in
   # Renew certificates, trust in certbot's algorithms
   renew)
     if /usr/bin/certbot renew --quiet --agree-tos ; then
+      ret=0
       ok "Renewed certificates"
-      touch "${updated}"
     else
       ret=$?
       not_ok "Certificate renewal failed"
-      exit $ret
     fi
+
+    # Sync anyway in case just some certificates failed
+    touch "${updated}"
+    ensure $ret
     ;;
   bootstrap)
     test -d "/etc/letsencrypt/live/${SUTTY}" && exit 0