This seems like a reasonable suggestion, https://github.com/harvester/harvester/issues/5552 adding a second load balancer with letsencrypt for that