diff --git a/roles/postgres/templates/letsencrypt.hook.d.j2 b/roles/postgres/templates/letsencrypt.hook.d.j2
index 5bd05178d08719c84b6027bbc59fd68f90a831b0..afae9e3c34d706c265143a11400da3c7c7fd337a 100644
--- a/roles/postgres/templates/letsencrypt.hook.d.j2
+++ b/roles/postgres/templates/letsencrypt.hook.d.j2
@@ -7,9 +7,13 @@ postgres_domain="{{ inventory_hostname }}"
 for domain in $RENEWED_DOMAINS; do
     case "$domain" in
         $postgres_domain)
-            for pem in /etc/letsencrypt/live/$postgres_domain/{privkey,fullchain,chain}.pem; do
-                install -o postgres -g postgres -m 400 $pem /var/lib/postgres/data/$pem
+            for pem in {privkey,fullchain,chain}.pem; do
+                install -o postgres -g postgres -m 400 \
+                    /etc/letsencrypt/live/$postgres_domain/$pem \
+                    /var/lib/postgres/data/$pem
             done
+            systemctl reload postgresql
+            break
             ;;
     esac
 done