issue wildcard certs through traefik

main.yml

@@ -97,8 +97,6 @@
   roles:
     - role: traefik
       tags: traefik_deploy
-      vars:
-        server: "jackson"
 
   tasks:
     - name: Deploy Gitea

roles/traefik/tasks/main.yml

@@ -25,17 +25,7 @@
   template:
     src: local-dynamic.yml.j2
     dest: "{{ data_dir }}/traefik/dynamic.yml"
-  when: server == "jade" or server == "nas" or server == "bear"
+  when: server == "bear"
-- name: Create Traefik Dynamic File (Remote)
-  template:
-    src: remote-dynamic.yml.j2
-    dest: "{{ data_dir }}/traefik/dynamic.yml"
-  when: server == "jackson"
-- name: Create Traefik Dynamic File (Remote 2)
-  template:
-    src: remote-ash-1.yml.j2
-    dest: "{{ data_dir }}/traefik/dynamic.yml"
-  when: server == "ash-1"
 
 - name: Deploy Traefik Docker Container
   docker_container:
@@ -63,3 +53,9 @@
         [{'name': docker_network_name}] +
         ([{'name': 'tunnel'}] if use_cloudflared | default(false) else [])
       }}
+    labels:
+      traefik.http.routers.wildcard.rule: "HostRegexp(`{subdomain:.+}.fntz.net`)"
+      traefik.http.routers.wildcard.tls: "true"
+      traefik.http.routers.wildcard.tls.certresolver: letsencrypt
+      traefik.http.routers.wildcard.tls.domains[0].main: fntz.net
+      traefik.http.routers.wildcard.tls.domains[0].sans: "*.fntz.net,*.citadel.fntz.net"

roles/traefik/templates/remote-ash-1.yml.j2

@@ -1,15 +0,0 @@
-http:
-  routers:
-    wings:
-      rule: "Host(`ash-1.landite.games`)"
-      service: wings
-      entryPoints:  
-        - webSecure
-      tls:
-        certResolver: letsencrypt
-    
-  services:
-    wings:
-      loadBalancer:
-        servers:
-          - url: "http://5.161.219.50:8090"

roles/traefik/templates/remote-dynamic.yml.j2

@@ -1,15 +0,0 @@
-http:
-  routers:
-    wings:
-      rule: "Host(`wings.landite.games`)"
-      service: wings
-      entryPoints:  
-        - webSecure
-      tls:
-        certResolver: letsencrypt
-    
-  services:
-    wings:
-      loadBalancer:
-        servers:
-          - url: "http://5.161.64.174:8090"