What a bug! https://community.letsencrypt.org/t/nginx-server-fails-after-certbot-renew/142660/15
My personal websites were breaking because an optional Perl extension in nginx was breaking every time certbot went to renew my SSL cert.
It's bugs like this that make me want to run screaming into the ocean, lord.