Currently nginx reloads every 6 hours to catch new certificate (which should be fine given the working renewal window via certbot).
mqtt (and bridges) however currently do not.
From eclipse-mosquitto/mosquitto#524, there seems to be debate whether SIGHUP actually works given the need to drop any existing clients anyhow, so maybe just kill and restart mosquitto / container entirely.
So maybe add something like
$(while inotifywait -e close_write /etc/letsencrypt; do ([SIGHUP or SIGKILL? mosquitto pid]) ...