It’s not that nice in practice. Traefik until 3.0 (which was released just a few days ago) wasn’t been able to reload TLS certificates under some circumstances: https://github.com/traefik/traefik/pull/9993

Built-in ACME support doesn’t work for me, so I still have some `systemctl restart traefik` hacks here and there.