Sorry, I meant LND, as configured by RaspiBolt. Alby Hub wants to validate the API ssl cert, but LND uses a fresh, self signed cert at startup.
Change was to throw out most of this branch because the UI required a non-blank value, the use a tls.Config with certificate validation disabled.