#!/bin/sh
set -eu
umask 077
exec certbot renew --quiet --no-random-sleep-on-renew \
  --config-dir /etc/gateway-admin-letsencrypt \
  --work-dir /var/lib/gateway-admin-proxy/certbot \
  --logs-dir /var/log/gateway-admin-certbot \
  --no-directory-hooks \
  --deploy-hook '/usr/sbin/nginx -t && /bin/systemctl reload nginx'