# GATEWAY_MODE=shared only. Copy to traefik/dynamic/default-cert.yml with
# GATEWAY_BASE_DOMAIN substituted (ops/deploy.sh does this) to request the
# one wildcard cert used as the default for every published subdomain.
tls:
  stores:
    default:
      defaultGeneratedCert:
        resolver: le-dns
        domain:
          main: "GATEWAY_BASE_DOMAIN"
          sans:
            - "*.GATEWAY_BASE_DOMAIN"