From 72ffc14258f4565a150f936be738ce5b28f9479d Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Tue, 27 May 2025 14:14:22 -0400
Subject: [PATCH] add dnsdist deploy-hook setup for ns1.staging.grapheneos.org

---
 certbot/ns1.staging.grapheneos.org | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/certbot/ns1.staging.grapheneos.org b/certbot/ns1.staging.grapheneos.org
index 0ba3618..b6991cc 100644
--- a/certbot/ns1.staging.grapheneos.org
+++ b/certbot/ns1.staging.grapheneos.org
@@ -1,6 +1,6 @@
 certbot certonly --webroot --webroot-path /srv/certbot --no-eff-email \
     --key-type ecdsa --reuse-key --preferred-profile tlsserver \
-    --deploy-hook "nginx -s reload" \
+    --deploy-hook "nginx -s reload; rsync -rLvc --delete --chmod=D750,F640 --chown root:dnsdist /etc/letsencrypt/live/ /etc/letsencrypt/dnsdist/; dnsdist -c -e 'reloadAllCertificates()'" \
     --cert-name ns1.staging.grapheneos.org \
     -d ns1.staging.grapheneos.org \
     -d ns2.staging.grapheneos.org \