I just ran both UNMS and the UniFi controller on a gcp instance (free credits). Their software is unconsistent though (the fact that there’s separate UNMS for the edgerouter and UniFi for the aps should already tell you that) but for example: the UNMS container sets up letsencyrpt etc but unifi does not.

Had to modify it to mount bind a shared cert location.