From 015335da295dd5652ba2290fa7b0c4099c0c204c Mon Sep 17 00:00:00 2001
From: Alex Frantz <alex@alexav.gg>
Date: Sun, 17 May 2026 17:58:53 -0400
Subject: [PATCH] issue wildcard certs through traefik

---
 main.yml                                      |  2 --
 roles/traefik/tasks/main.yml                  | 18 +++++++-----------
 roles/traefik/templates/remote-ash-1.yml.j2   | 15 ---------------
 roles/traefik/templates/remote-dynamic.yml.j2 | 15 ---------------
 4 files changed, 7 insertions(+), 43 deletions(-)
 delete mode 100644 roles/traefik/templates/remote-ash-1.yml.j2
 delete mode 100644 roles/traefik/templates/remote-dynamic.yml.j2

diff --git a/main.yml b/main.yml
index bbe81aa..19aab11 100644
--- a/main.yml
+++ b/main.yml
@@ -97,8 +97,6 @@
   roles:
     - role: traefik
       tags: traefik_deploy
-      vars:
-        server: "jackson"
 
   tasks:
     - name: Deploy Gitea
diff --git a/roles/traefik/tasks/main.yml b/roles/traefik/tasks/main.yml
index d7230fb..c959007 100644
--- a/roles/traefik/tasks/main.yml
+++ b/roles/traefik/tasks/main.yml
@@ -25,17 +25,7 @@
   template:
     src: local-dynamic.yml.j2
     dest: "{{ data_dir }}/traefik/dynamic.yml"
-  when: server == "jade" or server == "nas" or server == "bear"
-- name: Create Traefik Dynamic File (Remote)
-  template:
-    src: remote-dynamic.yml.j2
-    dest: "{{ data_dir }}/traefik/dynamic.yml"
-  when: server == "jackson"
-- name: Create Traefik Dynamic File (Remote 2)
-  template:
-    src: remote-ash-1.yml.j2
-    dest: "{{ data_dir }}/traefik/dynamic.yml"
-  when: server == "ash-1"
+  when: server == "bear"
 
 - name: Deploy Traefik Docker Container
   docker_container:
@@ -63,3 +53,9 @@
         [{'name': docker_network_name}] +
         ([{'name': 'tunnel'}] if use_cloudflared | default(false) else [])
       }}
+    labels:
+      traefik.http.routers.wildcard.rule: "HostRegexp(`{subdomain:.+}.fntz.net`)"
+      traefik.http.routers.wildcard.tls: "true"
+      traefik.http.routers.wildcard.tls.certresolver: letsencrypt
+      traefik.http.routers.wildcard.tls.domains[0].main: fntz.net
+      traefik.http.routers.wildcard.tls.domains[0].sans: "*.fntz.net,*.citadel.fntz.net"
diff --git a/roles/traefik/templates/remote-ash-1.yml.j2 b/roles/traefik/templates/remote-ash-1.yml.j2
deleted file mode 100644
index 75eb892..0000000
--- a/roles/traefik/templates/remote-ash-1.yml.j2
+++ /dev/null
@@ -1,15 +0,0 @@
-http:
-  routers:
-    wings:
-      rule: "Host(`ash-1.landite.games`)"
-      service: wings
-      entryPoints:  
-        - webSecure
-      tls:
-        certResolver: letsencrypt
-    
-  services:
-    wings:
-      loadBalancer:
-        servers:
-          - url: "http://5.161.219.50:8090"
\ No newline at end of file
diff --git a/roles/traefik/templates/remote-dynamic.yml.j2 b/roles/traefik/templates/remote-dynamic.yml.j2
deleted file mode 100644
index 1c05fb2..0000000
--- a/roles/traefik/templates/remote-dynamic.yml.j2
+++ /dev/null
@@ -1,15 +0,0 @@
-http:
-  routers:
-    wings:
-      rule: "Host(`wings.landite.games`)"
-      service: wings
-      entryPoints:  
-        - webSecure
-      tls:
-        certResolver: letsencrypt
-    
-  services:
-    wings:
-      loadBalancer:
-        servers:
-          - url: "http://5.161.64.174:8090"
\ No newline at end of file