Update: I received multiple suggestions to use Kanidm instead, since it is also lightweight but has built-in support for replication. I'll go that route!