I’m trying to renew my certificate automatically using cron.d. The goal is to reload nginx after the certificate has been renewed. Renewal works just fine both with dry-run and without it. I also had
post_hook = systemctl reload nginx in /etc/letsencrypt/renewal/example.com.conf under [renewalparams] section (site name changed).
The problem: nginx does not reload at all after renewal. In addition to that: after either the dry-run or the actual renewal, the post_hook row has been removed.
Have I misunderstood the purpose of [renewalparams]? Should I be able to define the post_hook there? Why does it get erased by certbot?
I’m running this on Ubuntu Server 16.10. Certbot version 0.8.1-2.