I did not double-check the renewal config file used the nginx plug-in - if that's what you meant. We did a dry-run that worked, the server block was touched by the plug-in and other examples used it so I drew conclusions from that.
Would not hurt to double-check but I don't get what's happening with these hooks now.
Do you have time to take over from here?