#!/bin/sh
set -eu

# Certbot calls this only after a certificate was renewed. Both commands are
# fixed; no certificate/domain environment value is interpreted or executed.
/usr/bin/timeout --signal=TERM --kill-after=5s 15s /usr/sbin/nginx -t
/usr/bin/timeout --signal=TERM --kill-after=5s 30s /usr/bin/systemctl reload-or-restart nginx.service
