From c30b68984ff627bfb01a450789d68f6491f002bc Mon Sep 17 00:00:00 2001
From: Karan Parashar <whyredfire@gmail.com>
Date: Thu, 5 Nov 2026 20:54:41 +0530
Subject: [PATCH] chore(traefik): Serve *.pixelos.net with a wildcard
 certificate

---
 add-ons/traefik/kustomization.yaml        |  1 +
 add-ons/traefik/wildcard-pixelos-net.yaml | 14 ++++++++++++++
 argocd-apps/add-ons/traefik.yaml          | 11 +++++++++++
 3 files changed, 26 insertions(+)
 create mode 100644 add-ons/traefik/wildcard-pixelos-net.yaml

diff --git a/add-ons/traefik/kustomization.yaml b/add-ons/traefik/kustomization.yaml
index bdefb02..f1a38ff 100644
--- a/add-ons/traefik/kustomization.yaml
+++ b/add-ons/traefik/kustomization.yaml
@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
   - wildcard-whyredfire-dev.yaml
   - wildcard-whyredfire-dpdns-org.yaml
+  - wildcard-pixelos-net.yaml
   - networkpolicy.yaml
diff --git a/add-ons/traefik/wildcard-pixelos-net.yaml b/add-ons/traefik/wildcard-pixelos-net.yaml
new file mode 100644
index 0000000..0303970
--- /dev/null
+++ b/add-ons/traefik/wildcard-pixelos-net.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard-pixelos-net
+  namespace: traefik
+spec:
+  dnsNames:
+    - '*.pixelos.net'
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt-prod
+  privateKey:
+    rotationPolicy: Always
+  secretName: wildcard-pixelos-net
diff --git a/argocd-apps/add-ons/traefik.yaml b/argocd-apps/add-ons/traefik.yaml
index 797515f..c81befb 100644
--- a/argocd-apps/add-ons/traefik.yaml
+++ b/argocd-apps/add-ons/traefik.yaml
@@ -64,6 +64,17 @@ spec:
                   - kind: Secret
                     name: wildcard-whyredfire-dpdns-org
                     group: ""
+              websecure-pixelos:
+                port: 8443
+                protocol: HTTPS
+                mode: Terminate
+                hostname: "*.pixelos.net"
+                namespacePolicy:
+                  from: All
+                certificateRefs:
+                  - kind: Secret
+                    name: wildcard-pixelos-net
+                    group: ""
           resources:
             limits:
               cpu: 1000m