Add lab subdomain

ansible/roles/traefik/files/traefik.yml

@@ -28,6 +28,7 @@ entryPoints:
             sans: ["*.jakehoward.tech"]
           - main: 0rng.one
             sans: ["*.0rng.one"]
+          - main: "*.lab.jakehoward.tech"
         {% endif %}
     {% if ansible_hostname == "docker" %}
     proxyProtocol:

terraform/desec.tf

@@ -26,3 +26,13 @@ resource "desec_token_policy" "traefik_acme_challenge" {
 
   depends_on = [desec_token_policy.traefik_default]
 }
+
+resource "desec_token_policy" "traefik_lab_acme_challenge" {
+  token_id   = desec_token.traefik.id
+  perm_write = true
+  subname    = "_acme-challenge.lab"
+  domain     = "jakehoward.tech"
+  type       = "TXT"
+
+  depends_on = [desec_token_policy.traefik_default]
+}

terraform/jakehoward.tech.tf

@@ -329,6 +329,16 @@ resource "desec_rrset" "jakehowardtech_karakeep" {
   ]
 }
 
+resource "desec_rrset" "jakehowardtech_lab" {
+  domain  = desec_domain.jakehowardtech.name
+  subname = "*.lab"
+  type    = "CNAME"
+  ttl     = local.dns_ttl_default
+  records = [
+    "${desec_rrset.sys_domain_pve_private.subname}.${desec_rrset.sys_domain_pve_private.domain}."
+  ]
+}
+
 resource "desec_rrset" "jakehowardtech_caa" {
   domain  = desec_domain.jakehowardtech.name
   subname = ""