Ah! I get it. Thanks for answering!

I wouldn’t pass the certs to the in-stack container, I normally set up a general TLS termination proxy for all the host and integrate that with Let’s Encrypt. For example, the Rancher load balancer (which is a HAProxy), using the “Rancher certificates” and generating those with the Let’s Encrypt stack. For Traefik, I would set up a global TLS termination proxy and make it handle the Let’s encrypt certificates.