Add extra SSL cert config to get aliases working

Reviewed-on: #1

README.md

@@ -21,6 +21,10 @@ Scuttlebutt room server, implemented in Go
 4. `abra app YOURAPPDOMAIN config` - be sure to change `$DOMAIN` to something that resolves to
    your Docker swarm box
 5. `abra app YOURAPPDOMAIN deploy`
+6. To set someone (yourself?) as an initial user, run 
+   ```
+   abra app YOURAPPDOMAIN run app "/app/cmd/insert-user/insert-user -repo /app/data @your-ssb-cryptkey.edXXX" 
+   ```
 
 [`abra`]: https://git.autonomic.zone/autonomic-cooperative/abra
 [`coop-cloud/traefik`]: https://git.autonomic.zone/coop-cloud/traefik

compose.yml

@@ -1,6 +1,4 @@
----
 version: "3.8"
-
 services:
   app:
     image: 3wordchant/go-ssb-room:2.0.3
@@ -16,16 +14,20 @@ services:
       labels:
         - "traefik.enable=true"
         - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=3000"
-        - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
+        - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`) || HostRegexp(`{subdomain:\\w+}.${DOMAIN}`)"
         - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
         - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
+        - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect-aliases@docker"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect-aliases.redirectregex.regex=^https://(\\w+)\\.${DOMAIN}/(.*)"
+        - "traefik.http.middlewares.${STACK_NAME}-redirect-aliases.redirectregex.replacement=https://${DOMAIN}/alias/$${1}$${2}"
         - "traefik.tcp.routers.${STACK_NAME}-muxrpc.rule=HostSNI(`*`)"
         - "traefik.tcp.routers.${STACK_NAME}-muxrpc.entrypoints=ssb-muxrpc"
         - "traefik.tcp.services.${STACK_NAME}-muxrpc.loadbalancer.server.port=8008"
-
+        - "traefik.http.routers.${STACK_NAME}.tls.domains[0].main=${DOMAIN}"
+        - "traefik.http.routers.${STACK_NAME}.tls.domains[0].sans=*.${DOMAIN}"
+        - coop-cloud.${STACK_NAME}.app.version=2.0.3-eec92a23
 networks:
   proxy:
     external: true
-
 volumes:
   data:

renovate.json

@@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}