Ohh, you mean mTLS. Generally there is no need to bind mount[1] it, you can just copy it from the host into your container, alternatively just generate them in the container. Is there a reason you have to have those directly on the PVE host somewhere? Also data and letsencrypt, why not have it...