Hello, how are folks handling TLS cert renewals when using LLDAPS? The issue I’m facing is I use Traefik to generate TLS certs from Cloudflare and use traefik cert dumper https://github.com/ldez/traefik-certs-dumper to get the certs, then manually copy them over to the LLDAP container directory. The problem is when the cert expires and I haven’t copied over the new certs; LLDAPS fails because of cert expiry errors which has cascading downstream problems with Authelia not working correctly. My setups been broken for months because I’ve been lazy to ssh into my sever and do all that nonsense. I could probably make a cron job/script but it feels to hackish and I’m pretty lazy to implement that. Just wondering how other people might be handling cert renewals for a similar pattern.

message has been deleted

Can't you mount the certificates directly into the LLDAP container? From where they're generated

i don't use traefik so this probably isn't very helpful to you but to answer your original question, i use acme.sh to update a wildcard cert (dns challenge), and do all tls termination on nginx, which i reload after every acme.sh renewal run. i (tcp stream) proxy ldaps through nginx too, so i get updated certificates "for free" at the same time as all web hosts are updated