Funny, I mentioned it at How to handle SSL, Lets Encrypt when moving hosting, but I didn’t include the cron job here:
0 4 * * 0 /usr/bin/certbot renew --renew-hook "prosodyctl --root cert import /etc/letsencrypt/live" --quiet
@trashHeap is your’s similar?