(Manually renewed) certificate is valid for another 89 days but browsers don't want to hear it

It’s happening for another domain as well: the certificate gets signed but it’s the nginx configuration that fails.

args:
  names:
  - nginx
ended_at: 2023-01-07 12:16:24.393724
error: 'Could not regenerate the configuration for category(s): nginx'
interface: api
operation: regen_conf
parent: 20230107-121541-letsencrypt_cert_install-domain2.tld
related_to:
- - configuration
  - nginx
started_at: 2023-01-07 12:16:21.863601
success: false
yunohost_version: 4.4.2.14

============

2023-01-07 12:16:21,909: DEBUG - Executing command '['sh', '-c', '/bin/bash -x "./15-nginx" pre \'\' \'\' /home/yunohost.conf/pending/nginx 7>&1']'
2023-01-07 12:16:21,939: DEBUG - + set -e
2023-01-07 12:16:21,940: DEBUG - + . /usr/share/yunohost/helpers
2023-01-07 12:16:21,945: DEBUG - +++ set +o
2023-01-07 12:16:21,947: DEBUG - +++ grep xtrace
2023-01-07 12:16:21,954: DEBUG - ++ readonly 'XTRACE_ENABLE=set -o xtrace'
2023-01-07 12:16:21,956: DEBUG - ++ XTRACE_ENABLE='set -o xtrace'
2023-01-07 12:16:22,163: DEBUG - + do_pre_regen /home/yunohost.conf/pending/nginx
2023-01-07 12:16:22,165: DEBUG - + pending_dir=/home/yunohost.conf/pending/nginx
2023-01-07 12:16:22,166: DEBUG - + cd /usr/share/yunohost/templates/nginx
2023-01-07 12:16:22,167: DEBUG - + nginx_dir=/home/yunohost.conf/pending/nginx/etc/nginx
2023-01-07 12:16:22,169: DEBUG - + nginx_conf_dir=/home/yunohost.conf/pending/nginx/etc/nginx/conf.d
2023-01-07 12:16:22,170: DEBUG - + mkdir -p /home/yunohost.conf/pending/nginx/etc/nginx/conf.d
2023-01-07 12:16:22,178: DEBUG - + cp plain/acme-challenge.conf.inc plain/global.conf plain/ssowat.conf plain/yunohost_panel.conf.inc plain/yunohost_sso.conf.inc /home/yunohost.conf/pending/nginx/etc/nginx/conf.d
2023-01-07 12:16:22,187: DEBUG - ++ yunohost settings get ssowat.panel_overlay.enabled
2023-01-07 12:16:23,219: WARNING - Error while loading unknown settings Expecting value: line 1 column 1 (char 0)
2023-01-07 12:16:23,231: WARNING - Could not open settings file, reason: Expecting value: line 1 column 1 (char 0)
2023-01-07 12:16:23,383: DEBUG - + panel_overlay=
2023-01-07 12:16:24,388: ERROR - Could not run script: /usr/share/yunohost/hooks/conf_regen/15-nginx
Traceback (most recent call last):
  File "/usr/lib/moulinette/yunohost/hook.py", line 306, in hook_callback
    path, args=hook_args, chdir=chdir, env=env, raise_on_error=True
  File "/usr/lib/moulinette/yunohost/hook.py", line 393, in hook_exec
    raise YunohostError("hook_exec_failed", path=path)
yunohost.utils.error.YunohostError: Could not run script: /usr/share/yunohost/hooks/conf_regen/15-nginx

(https://paste.yunohost.org/raw/uwokohihip)

But before the certificate gets regenerated, I see these 2 warnings:

The configuration file '/etc/dnsmasq.d/MYDOMAIN.COM' has been manually modified and will not be updated

grep: /run/resolvconf/resolv.conf: No such file or directory

(MYDOMAIN.COM is not where yunohost is installed, rather yunohost is at ynh.MYDOMAIN.COM)

Now, the fact that /run/resolvconf/resolv.conf doesn’t exist might explain the error later in the process: it looks like the script is trying to parse an empty file (I could be wrong).

There is no special characters in the domain or sub-domain names. It hasn’t changed for years.

I’ve updated to 4.4.2.14 recently, maybe things are done differently now?