#!/bin/sh
# Certbot deploy hook. Runs once per certificate that was actually renewed.
#
# It only leaves a marker. Every jump has its own certificate, so a single `certbot renew` can renew
# dozens in one pass, and reloading here would reload Nginx once per certificate. Nginx holds
# long-lived WebSocket connections to the contract containers, and a reload retires workers only once
# their connections drain — so dozens of reloads in a row accumulate worker processes rather than
# replacing them. The post hook does the reloading, once.
set -eu

touch /run/veiledcrossroads-nginx-reload
