!! Disclaimer !! While there are undoubtably benefits to using a wildcard certificate they should be used with caution. By their very nature they allow for any subdomain under the root domain to use it. While they make it easy to add new services quickly in a homelab environment they should generally be avoided for public facing systems. The NSA actually has a write up with more details here: https://www.nsa.gov/Press-Room/News-Highlights/Article/Article/2804293/avoid-dangers-of-wildcard-tls-certificates-the-alpaca-technique/

Using Caddy as a reverse proxy in 2022 Dusty Candland | Sun Dec 25 2022 | commandwp, caddy I've been wanting to...