One Second Without DNS, Eight Hours Offline

An unattended package upgrade restarted nginx while systemd was reloading itself. For that one second nothing could resolve a hostname, nginx refused to start, and because nginx ships with Restart=no, nobody picked it up. Two sites stayed down for se