#!/bin/sh
set -eu
umask 077
exec certbot renew --quiet \
  --config-dir /etc/white-proxy-letsencrypt \
  --work-dir /var/lib/white-proxy-certbot \
  --logs-dir /var/log/white-proxy-certbot \
  --no-directory-hooks \
  --deploy-hook '/usr/sbin/nginx -t && /bin/systemctl reload nginx'