Switch to rule-based hosts for certificate generation

.env.dist

@@ -23,8 +23,10 @@ BIND_ADDRESS=127.0.0.1
 # Main mail domain
 DOMAIN=mailu.io
 
-# Exposed mail-server hostname
+# Main hostname for announces, and list of all available hostnames, separated
+# by comas
 HOSTNAME=mail.mailu.io
+HOSTNAMES=mail.mailu.io,alternative.mailu.io,yetanother.mailu.io
 
 # Postmaster local part (will append the main mail domain)
 POSTMASTER=admin

traefik/conf/cert.toml

@@ -22,10 +22,3 @@ domain = "{{ DOMAIN }}"
 watch = true
 exposedbydefault = false
 
-[acme]
-email = "{{ POSTMASTER }}@{{ DOMAIN }}"
-storageFile = "/certs/acme.json"
-onDemand = true
-entryPoint = "https"
-
-

traefik/conf/letsencrypt.toml

@@ -22,7 +22,8 @@ exposedbydefault = false
 [acme]
 email = "{{ POSTMASTER }}@{{ DOMAIN }}"
 storageFile = "/certs/acme.json"
-onDemand = true
+onDemand = false
+OnHostRule = true
 entryPoint = "https"