Fix nginx reload after certificate renewal - #5720
Conversation
|
Docker Image for build 1 is available on DockerHub: Note Ensure you backup your NPM instance before testing this image! Especially if there are database changes. Warning Changes and additions to DNS Providers require verification by at least 2 members of the community! |
|
Can confirm this on 2.15.1 with http-01 renewals: "Renew now" succeeded for several certificates (certbot renewed them and the UI showed the new expiry dates), but nginx kept serving the old — by then expired — certificates until a manual |
Why
A successful Let's Encrypt renewal updates the certificate files on disk, but nginx continues serving the certificate already loaded in memory until it is reloaded.
The shared certificate renewal path did not reload nginx after Certbot completed. This affects both HTTP and DNS challenge renewals, including Cloudflare.
This change calls the existing nginx reload function immediately after a successful renewal, allowing the renewed certificate to be served without restarting the container or manually reloading nginx.
This restores behavior that was lost when auto-renewal was changed to use the shared renewal function in #3392.
Fixes #3803
Type of Change
AI Usage