use explicit tls domain config

Author: rikukissa

infrastructure/docker-compose.app.yml

@@ -66,6 +66,8 @@ services:
         - 'traefik.http.services.${STACK}__countryconfig.loadbalancer.server.port=3040'
         - 'traefik.http.routers.${STACK}__countryconfig.tls=true'
         - 'traefik.http.routers.${STACK}__countryconfig.tls.certresolver=certResolver'
+        - 'traefik.http.routers.${STACK}__countryconfig.tls.domains[0].main=${STACK}.{{hostname}}'
+        - 'traefik.http.routers.${STACK}__countryconfig.tls.domains[0].sans=*.${STACK}.{{hostname}}'
         - 'traefik.http.routers.${STACK}__countryconfig.entrypoints=web,websecure'
         - 'traefik.http.routers.${STACK}__countryconfig.middlewares=gzip-compression'
         - 'traefik.docker.network=dependencies_{{STACK}}_dependencies_net'
@@ -137,6 +139,8 @@ services:
         - 'traefik.http.services.${STACK}__login.loadbalancer.server.port=80'
         - 'traefik.http.routers.${STACK}__login.tls=true'
         - 'traefik.http.routers.${STACK}__login.tls.certresolver=certResolver'
+        - 'traefik.http.routers.${STACK}__login.tls.domains[0].main=${STACK}.{{hostname}}'
+        - 'traefik.http.routers.${STACK}__login.tls.domains[0].sans=*.${STACK}.{{hostname}}'
         - 'traefik.http.routers.${STACK}__login.entrypoints=web,websecure'
         - 'traefik.http.routers.${STACK}__login.middlewares=gzip-compression'
         - 'traefik.docker.network=dependencies_{{STACK}}_dependencies_net'
@@ -173,6 +177,8 @@ services:
         - 'traefik.http.services.${STACK}__client.loadbalancer.server.port=80'
         - 'traefik.http.routers.${STACK}__client.tls=true'
         - 'traefik.http.routers.${STACK}__client.tls.certresolver=certResolver'
+        - 'traefik.http.routers.${STACK}__client.tls.domains[0].main=${STACK}.{{hostname}}'
+        - 'traefik.http.routers.${STACK}__client.tls.domains[0].sans=*.${STACK}.{{hostname}}'
         - 'traefik.http.routers.${STACK}__client.entrypoints=web,websecure'
         - 'traefik.docker.network=dependencies_{{STACK}}_dependencies_net'
 
@@ -234,6 +240,8 @@ services:
         - 'traefik.http.services.${STACK}__gateway.loadbalancer.server.port=7070'
         - 'traefik.http.routers.${STACK}__gateway.tls=true'
         - 'traefik.http.routers.${STACK}__gateway.tls.certresolver=certResolver'
+        - 'traefik.http.routers.${STACK}__gateway.tls.domains[0].main=${STACK}.{{hostname}}'
+        - 'traefik.http.routers.${STACK}__gateway.tls.domains[0].sans=*.${STACK}.{{hostname}}'
         - 'traefik.http.routers.${STACK}__gateway.entrypoints=web,websecure'
         - 'traefik.http.routers.${STACK}__gateway.middlewares=gzip-compression'
         - 'traefik.docker.network=dependencies_{{STACK}}_dependencies_net'
@@ -420,6 +428,8 @@ services:
         - 'traefik.http.services.${STACK}__auth.loadbalancer.server.port=4040'
         - 'traefik.http.routers.${STACK}__auth.tls=true'
         - 'traefik.http.routers.${STACK}__auth.tls.certresolver=certResolver'
+        - 'traefik.http.routers.${STACK}__auth.tls.domains[0].main=${STACK}.{{hostname}}'
+        - 'traefik.http.routers.${STACK}__auth.tls.domains[0].sans=*.${STACK}.{{hostname}}'
         - 'traefik.http.routers.${STACK}__auth.entrypoints=web,websecure'
         - 'traefik.docker.network=dependencies_{{STACK}}_dependencies_net'
         - 'traefik.http.middlewares.${STACK}__auth.headers.customresponseheaders.Pragma=no-cache'
@@ -493,6 +503,8 @@ services:
         - 'traefik.http.services.${STACK}__webhooks.loadbalancer.server.port=2525'
         - 'traefik.http.routers.${STACK}__webhooks.tls=true'
         - 'traefik.http.routers.${STACK}__webhooks.tls.certresolver=certResolver'
+        - 'traefik.http.routers.${STACK}__webhooks.tls.domains[0].main=${STACK}.{{hostname}}'
+        - 'traefik.http.routers.${STACK}__webhooks.tls.domains[0].sans=*.${STACK}.{{hostname}}'
         - 'traefik.http.routers.${STACK}__webhooks.entrypoints=web,websecure'
         - 'traefik.docker.network=dependencies_{{STACK}}_dependencies_net'
         - 'traefik.http.middlewares.${STACK}__webhooks.headers.customresponseheaders.Pragma=no-cache'
@@ -542,6 +554,8 @@ services:
         - 'traefik.http.services.${STACK}__config.loadbalancer.server.port=2021'
         - 'traefik.http.routers.${STACK}__config.tls=true'
         - 'traefik.http.routers.${STACK}__config.tls.certresolver=certResolver'
+        - 'traefik.http.routers.${STACK}__config.tls.domains[0].main=${STACK}.{{hostname}}'
+        - 'traefik.http.routers.${STACK}__config.tls.domains[0].sans=*.${STACK}.{{hostname}}'
         - 'traefik.http.routers.${STACK}__config.entrypoints=web,websecure'
         - 'traefik.docker.network=dependencies_{{STACK}}_dependencies_net'
         - 'traefik.http.middlewares.${STACK}__config.headers.customresponseheaders.Pragma=no-cache'
@@ -720,6 +734,8 @@ services:
         - 'traefik.http.services.${STACK}__metabase.loadbalancer.server.port=4444'
         - 'traefik.http.routers.${STACK}__metabase.tls=true'
         - 'traefik.http.routers.${STACK}__metabase.tls.certresolver=certResolver'
+        - 'traefik.http.routers.${STACK}__metabase.tls.domains[0].main=${STACK}.{{hostname}}'
+        - 'traefik.http.routers.${STACK}__metabase.tls.domains[0].sans=*.${STACK}.{{hostname}}'
         - 'traefik.http.routers.${STACK}__metabase.entrypoints=web,websecure'
         - 'traefik.docker.network=dependencies_{{STACK}}_dependencies_net'
         - 'traefik.http.middlewares.${STACK}__metabase.headers.customresponseheaders.Pragma=no-cache'