Hi @dpocock,
The cert-manager method of sharing the cert/key is the best I’ve found for a kubernetes stack, but again you need to be running kubernetes. The cert-manager tool benefits from kubernetes using etcd as its underlying key/val store. This blog post goes into detail about Traefik with Consul as the key/val store and could definitely be created without requiring a kubernetes environment.
Check out some of these topics for ideas.