nginx: reload server for renewed LE certificates

roles/nginx/files/reload-nginx.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+
+service nginx reload

roles/nginx/tasks/main.yml

@@ -29,6 +29,12 @@
     cmd: certbot certonly --non-interactive --agree-tos --register-unsafely-without-email --webroot --webroot-path /srv/http -d {{ dns_name }}
     creates: '/etc/letsencrypt/renewal/{{ dns_name }}.conf'
 
+- name: Install certificate renewal deployment hook
+  copy:
+    dest: /etc/letsencrypt/renewal-hooks/deploy/
+    src: reload-nginx.sh
+    mode: 0755
+
 - name: Enable certbot renewal
   cron:
     name: "certbot renew"