Ubuntu Bionic for OpenFrame

[Paul Webster]

I think nginx suppprts "reload" (sighup) to detect new certificate - so can use that rather than "restart" which would mean no down time and transactions in progress could complete.

[roobarb!]

I think nginx suppprts "reload" (sighup) to detect new certificate - so can use that rather than "restart" which would mean no down time and transactions in progress could complete.

Ta, I now have certbot do this with a --post-hook, so if any certs are updated, they're reloaded automatically. Should have done that a long time ago, but I used to use wildcard certificates which require DNS confirmation, and there's no API hook for my provider. Well, none I wanted to play with anyway.