The docs state that --deploy-hook is run after successful issuing, expanding and renewing actions.
But the docs aren’t clear about /etc/letsencrypt/renewal-hooks/{pre,deploy,post}/*.sh.
I want to run a script after renewal only (so I can’t use --deploy-hook), and only as long as renewal was successful. Can I use /etc/letsencrypt/renewal-hooks/deploy/ for that?
(BTW, --renew-hook is ideal for that use case, pity it’s deprecated! 
)