I think you may want to use nfqueue authenticator so it can run in front of working webserver without turning it off by intercept challenge message in firewall. you won't need post hook to restart webserver with this
4 Likes