AppWrite Template Deploy - Wild Card Domains for Function Doesn't Work

[afunworm]

AppWrite uses *.domain.com to deploy functions. The problem is that as of now, every time I have a function, I have to go into Dokploy domain to add it.

For example, if AppWrite generates the URL thgiewrev0sim0mru0y.domain.com, I have to go in the Domains section of my AppWrite container, and add thgiewrev0sim0mru0y.domain.com to point to the appwrite container.

I have tried pointing *.domain.com to appwrite, but that didn't work. It only works if I specify what the subdomain is, for some reason.

I'd appreciate any input on how to make this work.

Thank you.

[afunworm]

Update:

I've tried adding a wildcard HostRegexp() but still, any randomstring.mydomain.com doesn't resolve to the appwrite container. Wild card DNS pointed to the server.

    labels:
      - traefik.enable=true
      - traefik.constraint-label-stack=appwrite

      # Custom Route for Wild Card
      - traefik.http.routers.appwrite-wild-web.rule=HostRegexp(`{subdomain:[a-zA-Z0-9-]+}.mydomain.com)
      - traefik.http.routers.appwrite-wild-web.entrypoints=web
      - traefik.http.services.appwrite-wild-web.loadbalancer.server.port=80
      - traefik.http.routers.appwrite-wild-web.service=appwrite-wild-web
      - traefik.http.routers.appwrite-wild-web.middlewares=redirect-to-https@file
      
      - traefik.http.routers.appwrite-wild-websecure.rule=HostRegexp(`{subdomain:[a-zA-Z0-9-]+}.mydomain.com`)
      - traefik.http.routers.appwrite-wild-websecure.entrypoints=websecure
      - traefik.http.routers.appwrite-wild-websecure.service=appwrite-wild-websecure
      - traefik.http.routers.appwrite-wild-websecure.tls.certresolver=letsencrypt

Is there any other way to deploy wild card to a container in Dokploy?

[afunworm]

Thank you. This actually fixes the problem with HTTP wild card subdomain.

Is there anyway to set up the Traefik in Dokploy to deal with wild card SSL? (DNS challenge)? The only way I can think of right now is to create a different resolver for that specific wild card domain in traefik.yml, but then there's no way to pass in, say, Cloudflare API Key, unless I stop and manually re-create the traefik container.

[djsisson]

@afunworm
if you're using cloudflare just add the wildcard cert for your domain from cloudflare in a dynamic file.

the dns challenge would only get ran once and would also get you a wildcard cert, but it would need refreshing every 30 days, the one direct from cf lasts 10 years

[afunworm]

@afunworm if you're using cloudflare just add the wildcard cert for your domain from cloudflare in a dynamic file.

the dns challenge would only get ran once and would also get you a wildcard cert, but it would need refreshing every 30 days, the one direct from cf lasts 10 years

Would you kindly please show me how to achieve this? I already generated the certificate from Cloudflare (certificate & private key) but I'm not sure where to go next. I'm trying to sneak it inside acme.json but it doesn't work.

[djsisson]

tls:
  certificates:
    - certFile: /etc/dokploy/traefik/dynamic/certs/domain.cert
      keyFile: /etc/dokploy/traefik/dynamic/certs/domain.key

Save your certs in dir below

/etc/dokploy/traefik/dynamic/certs/

Then save the above file at
/etc/dokploy/traefik/dynamic/certs.yaml

That should be enough, check logs after in case of any errors

[afunworm]

• traefik.http.routers.appwrite-wild-websecure.rule=HostRegexp({subdomain:[a-zA-Z0-9-]+}.mydomain.com)
  - traefik.http.routers.appwrite-wild-websecure.entrypoints=websecure
  - traefik.http.routers.appwrite-wild-websecure.service=appwrite-wild-websecure
  - traefik.http.routers.appwrite-wild-websecure.tls.certresolver=letsencrypt

This is perfect! It works!! I've been sleeping on this for like a week now! Thank you so much!!!

Just one last question, is there any documentation on what you just did (craete the certs.yaml, put the keys, etc.) that I can do some research on? I'd like to understand what I did instead of just following.

Again, thank you so much!!