We add both localhost and the internal container names of each service to the certificates so both VM and containerised setups should work with the same setup.
The script can be run on its own to generate certificates for local testing. This should not affect the way provision.sh works.