/etc/letsencrypt/cli.ini

The line post-hook in this file determines what certbot is doing after renewing a certificate:

post-hook = systemctl reload postfix ; systemctl reload dovecot ; systemctl restart apache2

It should trigger postfix and dovecot to reload and restart apache.