Small improvement, but `reload` should do this while gracefully terminating connections:

https://www.guyrutenberg.com/2017/01/01/lets-encrypt-reload-...

http://nginx.org/en/docs/beginners_guide.html

Basically `reload` should have the external appearance of 0 downtime.