if only update ssl is required, don't reconfig gitlab, just reload nginx.
sudo gitlab-ctl hup nginx sudo gitlab-ctl hup registry
here is the official docs:https://docs.gitlab.com/omnibus/settings/ssl/index.html#update-the-ssl-certificates