Has anyone considered v3 non-root?

Using non-root is probably a bit more complex to set up, create new user up front on host. But in general it should work without a problem, as long as permissions for files are correct (acme.json, optional dynamic config file).

I prefer to create my own Docker socket proxy to not rely on an image by an unknown source, check my recent post.