fix CVE-2020-1971 again

scripts/certbot-renew-hook.sh

@@ -1,5 +1,6 @@
 #!/bin/sh
 
+# load some functions
 . /opt/scripts/utils.sh
 
 job_log "[CERTBOT] certificates have been renewed"

scripts/certbot-renew.sh

@@ -1,5 +1,6 @@
 #!/bin/sh
 
+# load some functions
 . /opt/scripts/utils.sh
 
 # ask new certificates if needed
@@ -10,13 +11,3 @@ if [ "$?" -eq 0 ] ; then
 else
 	job_log "[CERTBOT] renew operation failed"
 fi
-
-# fix rights
-chown -R root:nginx /etc/letsencrypt
-chmod -R 740 /etc/letsencrypt
-find /etc/letsencrypt -type d -exec chmod 750 {} \;
-
-# reload nginx
-if [ -f /tmp/nginx.pid ] ; then
-	/usr/sbin/nginx -s reload > /dev/null 2>&1
-fi

scripts/referrers.sh

@@ -38,7 +38,6 @@ if [ "$lines" -gt 1 ] ; then
 	fi
 else
 	job_log "[BLACKLIST] can't update referrers list"
-
 fi
 
 rm -f /tmp/map-referrer.conf 2> /dev/null

scripts/user-agents.sh

@@ -40,7 +40,6 @@ if [ "$lines" -gt 1 ] ; then
 	fi
 else
 	job_log "[BLACKLIST] can't update user-agent list"
-
 fi
 
 rm -f /tmp/map-user-agent.conf 2> /dev/null