Monitoring: check LDAPjs cert expiry
When the Lets Encrypt cert is renewed on www-prod-2, the LDAPjs service is not automatically restarted.
In the short term: implement monitoring of the cert expiry.
JIRA doesn't seem to mind expired certs, but Gitlab throws an error.