[Improvement] Ability to reload TLS certificates

[Dr-Shadow]

Preflight Checklist

• I could not find a solution in the existing issues, docs, nor discussions
• I have joined the ZITADEL chat

Describe your problem

Hello, I'm missing guidance on the ability to reload the TLS certificates when renewed instead of restarting.

I usually use this on nginx : kill -SIGHUP $(cat /run/nginx.pid)
I'm wondering how that works for Zitadel (with no reverse proxy - TLS handled directly through the app)

For now, I use a reverse proxy with the ability to reload certificates.

Describe your ideal solution

Either watch for changes with inotify on the TLS files (cert / key) and reload them if they are valid or allow to reload them through a signal (SIGHUP / SIGUSR1)

Version

No response

Environment

Self-hosted

Additional Context

No response