Its actually simpler than I expected to do the wildcard cert setup in Caddy. You can just add the wildcard block at the top, and leave the rest of the config as-is, and they will default to using the wildcard instead of individual certs.
Comment on Caddy and multiple subdomains/reverse proxies
AzuraTheSpellkissed@lemmy.blahaj.zone 2 hours ago
Note that you are likely leaking a list of all your subdomains in certificate transparency logs. Some users might not want that to happen, in that case using a wildcard certificate can help, but it’s either more tedious to set up (generating the cert outside of caddy) or less readable (using a Caddyfile with a single domain block for the wildcard containing a handle block per subdomains).
crandall@lemmy.today 2 hours ago
AzuraTheSpellkissed@lemmy.blahaj.zone 2 hours ago
That would be great. Though I’ve had that not work as expected at the beginning of 2026, but maybe you are right.
UnrefinedChihuahua@lemmy.dbzer0.com 1 hour ago
Thanks for this. Next project to look in to.
CorrectAlias@piefed.blahaj.zone 1 hour ago
I user caddy-cloudflare with *.caddy files which allows me to get a signed wildcard cert for my internal subdomains. I did it for this exact reason, I didn’t want to leak my internal subdomains.