Wildcard domains with traefik?

Managed DNS Hosting
1

I recently wanted to to switch to wildcard letsencrypt certificates for my traefik setup (due to trying aggressive geoblocking as I have lots of irrelevant connects from dubious countries, but this also blocks the letsencrypt servers and they do not publish ip addresses to add to a whitelist).
However, it does not really work and gives an error message:
unable to generate a certificate for the domains [domain.org]: error: one or more domains had a problem:\n[*.domain.org] [*.domain.org] acme: error presenting token: desec: no subdomain because the domain and the zone are identical:

Any idea what that means and how I could rectify it?

2

can you share the config?
from the error it seems that maybe you put an extra *. somewhere it doesn’t belong, but i can’t be sure without having a look at the config

3

I had the same issue with Letsencrypt and Traefik when using a wildcard CNAME record with the root domain, i.e.

* CNAME domain.org.

gave the error you mentioned. After switching to

* CNAME server.domain.org.

it worked as expected.