Multiple domains and certificates

[frenkel]

I have a number of domains that can get certificates through Let's Encrypt, a wildcard certificate from another Certificate Authority. My understanding is I won't be able to deploy this as one Kamal application. Is that correct? Or is there some trick to deploy the same appplication once, but with different certificates?

I think the following commands would need to be run by kamal:

kamal-proxy deploy service1 --target web-1:3000 --host something.com --tls
kamal-proxy deploy service2 --target web-1:3000 --host somethingelse.com --tls --tls-certificate-path cert.pem --tls-private-key-path key.pem

[rogerheykoop]

You can.
Just try something like this in your proxy settings, but it will request a new certificate for you through letsencrypt.

proxy:
ssl: true
hosts:
- something.com
- somethingelse.com

[frenkel]

Thanks, but for wildcard certificates that’s not possible. I nees the combination of with and without automatic certificates.

[yaKashif]

Having a wildcard host option by default is a good feature for tonnes of mult-tenant apps

proxy:
  ssl: true
  hosts:
    - something.com
    - somethingelse.com
    - *.somethingelse.com

[yaKashif]

Seems like basecamp/kamal-proxy#45 works towards that but without auto ssl

[frenkel]

I think this can be achieved by running kamal-proxy deploy <new deployed container> with the correct arguments for the other domains. Would it be possible to run this with a hook? post-deploy seems too late (small window where old container is missing), and pre-deploy will probably not have the new container available yet.