Swap certificates for wildcards

ansible/roles/traefik/files/file-provider-gitlab.yml

@@ -3,8 +3,6 @@ http:
     router-gitlab:
       rule: Host(`git.theorangeone.net`)
       service: service-gitlab
-      tls:
-        certResolver: le
   services:
     service-gitlab:
       loadBalancer:

ansible/roles/traefik/files/file-provider-grafana.yml

@@ -3,8 +3,6 @@ http:
     router-grafana:
       rule: Host(`grafana.jakehoward.tech`)
       service: service-grafana
-      tls:
-        certResolver: le
   services:
     service-grafana:
       loadBalancer:

ansible/roles/traefik/files/file-provider-homeassistant.yml

@@ -3,8 +3,6 @@ http:
     router-homeassistant:
       rule: Host(`homeassistant.jakehoward.tech`)
       service: service-homeassistant
-      tls:
-        certResolver: le
   services:
     service-homeassistant:
       loadBalancer:

ansible/roles/traefik/files/file-provider-jellyfin.yml

@@ -3,8 +3,6 @@ http:
     router-jellyfin:
       rule: Host(`media.jakehoward.tech`)
       service: service-jellyfin
-      tls:
-        certResolver: le
   services:
     service-jellyfin:
       loadBalancer:

ansible/roles/traefik/files/traefik.yml

@@ -17,6 +17,15 @@ entryPoints:
       middlewares:
         - floc-block@file
         - compress@file
+      tls:
+        certresolver: le
+        domains:
+          - main: theorangeone.net
+            sans: "*.theorangeone.net"
+          - main: jakehoward.tech
+            sans: "*.jakehoward.tech"
+          - main: 0rng.one
+            sans: "*.0rng.one"
     proxyProtocol:
       trustedIPs:
         - "{{ wireguard.cidr }}"