I have two PMG servers in HA, they use LE certificates for all services. Recently found that some of the configuration (accounts, challenges) are shared between servers but the certificates themselves are not, and despite the certificates being the same across services (api, smtp), a new certificate is generated for each service.
This means this cluster of two servers is requesting four certificates, one certificate per service per host instead of using the one certificate across all services in the cluster. LE has rate limiting, I may deploy more than 2 PMG servers at some point, services may be added by Proxmox, so the number of LE certificates requested may increase, and LE is rate limited. It's unlikely a PMG cluster would be rate limited under normal conditions but it could happen.
If the behavior I described is how PMG is suppose to work I'd like to put in a change or feature request to re-use valid certificates across clustered services.
This means this cluster of two servers is requesting four certificates, one certificate per service per host instead of using the one certificate across all services in the cluster. LE has rate limiting, I may deploy more than 2 PMG servers at some point, services may be added by Proxmox, so the number of LE certificates requested may increase, and LE is rate limited. It's unlikely a PMG cluster would be rate limited under normal conditions but it could happen.
If the behavior I described is how PMG is suppose to work I'd like to put in a change or feature request to re-use valid certificates across clustered services.