@tekkie I agree that's not super easy, but it's planned to have it integrated within haproxy. using acme.sh with this procedure allows you to do it without reloading the haproxy process, but you could do it with anything else like certbot and reloading. Don't hesitate to give me feedback about what you need or expect from this feature!