From c91ee85dc4518ec9de341d7373b3eca8520e42ca Mon Sep 17 00:00:00 2001
From: Bob Mottram <bob@libreserver.org>
Date: Sun, 4 Sep 2022 16:43:25 +0100
Subject: [PATCH] Stop nginx before cert generation

---
 README.md             | 2 ++
 gemini/EN/install.gmi | 2 ++
 website/EN/index.html | 4 +++-
 3 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index d32de6fd8..d53a49c11 100644
--- a/README.md
+++ b/README.md
@@ -255,7 +255,9 @@ ln -s /etc/nginx/sites-available/YOUR_DOMAIN /etc/nginx/sites-enabled/
 Generate a LetsEncrypt certificate.
 
 ``` bash
+systemctl stop nginx
 certbot certonly -n --server https://acme-v02.api.letsencrypt.org/directory --standalone -d YOUR_DOMAIN --renew-by-default --agree-tos --email YOUR_EMAIL
+systemctl start nginx
 ```
 
 And restart the web server:
diff --git a/gemini/EN/install.gmi b/gemini/EN/install.gmi
index 4e7a6dd76..d7f9103b6 100644
--- a/gemini/EN/install.gmi
+++ b/gemini/EN/install.gmi
@@ -162,7 +162,9 @@ Enable the site:
 
 Forward port 443 from your internet router to your server. If you have dynamic DNS make sure its configured. Add a TLS certificate:
 
+    systemctl stop nginx
     certbot certonly -n --server https://acme-v02.api.letsencrypt.org/directory --standalone -d YOUR_DOMAIN --renew-by-default --agree-tos --email YOUR_EMAIL
+    systemctl start nginx
 
 Restart your web server:
 
diff --git a/website/EN/index.html b/website/EN/index.html
index c9bdb7d32..58ae522eb 100644
--- a/website/EN/index.html
+++ b/website/EN/index.html
@@ -1537,7 +1537,9 @@ Ever feel like corporate social media is deliberately pressing your buttons or g
       Forward port 443 from your internet router to your server. If you have dynamic DNS make sure its configured. Add a TLS certificate:
     </p>
     <div class="shell">
-      certbot certonly -n --server https://acme-v02.api.letsencrypt.org/directory --standalone -d YOUR_DOMAIN --renew-by-default --agree-tos --email YOUR_EMAIL
+        systemctl stop nginx<br>
+        certbot certonly -n --server https://acme-v02.api.letsencrypt.org/directory --standalone -d YOUR_DOMAIN --renew-by-default --agree-tos --email YOUR_EMAIL<br>
+        systemctl start nginx
     </div>
     <p class="intro">
       Restart your web server: