chore(traefik): Serve *.pixelos.net with a wildcard certificate

add-ons/traefik/kustomization.yaml

@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
   - wildcard-whyredfire-dev.yaml
   - wildcard-whyredfire-dpdns-org.yaml
+  - wildcard-pixelos-net.yaml
   - networkpolicy.yaml

add-ons/traefik/wildcard-pixelos-net.yaml

@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: wildcard-pixelos-net
+  namespace: traefik
+spec:
+  dnsNames:
+    - '*.pixelos.net'
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt-prod
+  privateKey:
+    rotationPolicy: Always
+  secretName: wildcard-pixelos-net

argocd-apps/add-ons/traefik.yaml

@@ -64,6 +64,17 @@ spec:
                   - kind: Secret
                     name: wildcard-whyredfire-dpdns-org
                     group: ""
+              websecure-pixelos:
+                port: 8443
+                protocol: HTTPS
+                mode: Terminate
+                hostname: "*.pixelos.net"
+                namespacePolicy:
+                  from: All
+                certificateRefs:
+                  - kind: Secret
+                    name: wildcard-pixelos-net
+                    group: ""
           resources:
             limits:
               cpu: 1000m