The certificate renewed but nginx didn't get reloaded by the post-hook for some reason
Post-mortem: The certbot package defined a systemd timer and a /etc/cron.d/ entry for renewal, so my own crontab entry that defined a post-hook never got to do the renewing
@benofbrown
On my configuration, I notice NGinx was reload but at the same time, certbot didn't release the ports so NGinx won't load the ports and I need to do a "service restart" to force NGinx to relisten on 80 and 443.
@Gargron
@C_Chell You might want to look at running certbot in certonly/webroot mode, it's a lot less intrusive.
@benofbrown I change it recently, but I have to recheck the configuraiton soon to be sure.
@benofbrown
I write a script call by cron to check if the NGinx was still alive, after 3 try (10 minutes total) it try to restart the service.
@Gargron