diff --git a/docker-compose.yml b/docker-compose.yml
index 957b659686d..22c6e3ffcb9 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -272,7 +272,7 @@ services:
     <<: *restart_policy
     ports:
       - "$SENTRY_BIND:80/tcp"
-    image: "nginx:1.16"
+    image: "nginx:1.21-alpine"
     volumes:
       - type: bind
         read_only: true
diff --git a/install/wrap-up.sh b/install/wrap-up.sh
index 2671a3a513a..c8217e30e69 100644
--- a/install/wrap-up.sh
+++ b/install/wrap-up.sh
@@ -3,7 +3,7 @@ if [[ "$MINIMIZE_DOWNTIME" ]]; then
 
   # Start the whole setup, except nginx and relay.
   $dc up -d --remove-orphans $($dc config --services | grep -v -E '^(nginx|relay)$')
-  $dc exec -T nginx service nginx reload
+  $dc restart nginx
 
   docker run --rm --network="${COMPOSE_PROJECT_NAME}_default" alpine ash \
     -c 'while [[ "$(wget -T 1 -q -O- http://web:9000/_health/)" != "ok" ]]; do sleep 0.5; done'