As discussed, I deployed to glcoud using the instructions provided, and *.sish.<domain> are all up and running fine, but the sish.domain itself does not appear to have a certificate provisioned, this stops me being able to access the API over https.

I see the certs for the subdomains in ssl/certmagic/certificates/acme-v02.api.letsencrypt.org-directory but nothing for the main server.

After being directed to the docker compose solution I run into the problem configuring the le-config.yml as my provider, Google Domains (now SquareSpace Domains) does not provide the information I need to configure the Lexicon tool.

In the meantime I am going to try installing certbot on the host server and soft linking the server certs on the server's /etc to sish's /mnt/stateful_partition/sish/ssl to see if that works.