3 ms·

You can use "service nginx reload" for a graceful reload with zero downtime.

• X-Istence 9y ago
  This does not reload the certificates if the new cert is in the same place as the old.
  • pfg 9y ago
    It does. "service nginx reload" (and similar commands, like systemctl reload nginx in systemd territory) sends SIGHUP to the nginx master process on all distributions I'm aware of, and that will cause the certificate and key files to be re-read. I've been using this in production for more than a year now, and if you google around a bit, most guides for automating renewal on nginx[1] will use that command. [1]: https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04 https://www.digitalocean.com/community/tutorials/how-to-secu...
    • cdubzzz 9y ago
      Ah, thanks for the reference. I only did restart because I had a vague recollection of reading that reload doesn't do the trick.