Its actually simpler than I expected to do the wildcard cert setup in Caddy. You can just add the wildcard block at the top, and leave the rest of the config as-is, and they will default to using the wildcard instead of individual certs.