diff --git a/README.md b/README.md
index d32de6fd8..d53a49c11 100644
--- a/README.md
+++ b/README.md
@@ -255,7 +255,9 @@ ln -s /etc/nginx/sites-available/YOUR_DOMAIN /etc/nginx/sites-enabled/
 Generate a LetsEncrypt certificate.
 
 ``` bash
+systemctl stop nginx
 certbot certonly -n --server https://acme-v02.api.letsencrypt.org/directory --standalone -d YOUR_DOMAIN --renew-by-default --agree-tos --email YOUR_EMAIL
+systemctl start nginx
 ```
 
 And restart the web server:
diff --git a/gemini/EN/install.gmi b/gemini/EN/install.gmi
index 4e7a6dd76..d7f9103b6 100644
--- a/gemini/EN/install.gmi
+++ b/gemini/EN/install.gmi
@@ -162,7 +162,9 @@ Enable the site:
 
 Forward port 443 from your internet router to your server. If you have dynamic DNS make sure its configured. Add a TLS certificate:
 
+    systemctl stop nginx
     certbot certonly -n --server https://acme-v02.api.letsencrypt.org/directory --standalone -d YOUR_DOMAIN --renew-by-default --agree-tos --email YOUR_EMAIL
+    systemctl start nginx
 
 Restart your web server:
 
diff --git a/website/EN/index.html b/website/EN/index.html
index c9bdb7d32..58ae522eb 100644
--- a/website/EN/index.html
+++ b/website/EN/index.html
@@ -1537,7 +1537,9 @@ Ever feel like corporate social media is deliberately pressing your buttons or g
       Forward port 443 from your internet router to your server. If you have dynamic DNS make sure its configured. Add a TLS certificate:
     </p>
     <div class="shell">
-      certbot certonly -n --server https://acme-v02.api.letsencrypt.org/directory --standalone -d YOUR_DOMAIN --renew-by-default --agree-tos --email YOUR_EMAIL
+        systemctl stop nginx<br>
+        certbot certonly -n --server https://acme-v02.api.letsencrypt.org/directory --standalone -d YOUR_DOMAIN --renew-by-default --agree-tos --email YOUR_EMAIL<br>
+        systemctl start nginx
     </div>
     <p class="intro">
       Restart your web server: