It's definitely doable, I ran across some examples [1] while looking for an automated process for renewing within docker.

[1]: https://github.com/AnalogJ/lexicon