Certbot can now execute a command after all the renewals. We could use this to restart nginx after certificate renewal:

For example, we could cron or alias this:

certbot -q renew --post-hook "/usr/local/sbin/nginx -t && /usr/local/sbin/nginx -s reload"