--- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: mziesel-nl-wildcard-cert spec: secretName: mziesel-nl-wildcard-cert-secret issuerRef: name: cloudflare-issuer kind: ClusterIssuer dnsNames: - 'mziesel.nl' - '*.mziesel.nl' --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: mziesel-com-wildcard-cert spec: secretName: mziesel-com-wildcard-cert-secret issuerRef: name: cloudflare-issuer kind: ClusterIssuer dnsNames: - 'mziesel.com' - '*.mziesel.com' --- apiVersion: traefik.io/v1alpha1 kind: TLSStore metadata: name: default spec: certificates: - secretName: mziesel-nl-wildcard-cert-secret - secretName: mziesel-com-wildcard-cert-secret