I have gitlab-runner on my VPS, all it does is `docker compose up`, that already includes a traefik setup with LE certificates.

Zero-downtime does sound interesting though, and is probably better than `traefik.http.middlewares.test-retry.retry`.