From e8b3a428102a6032d2704969f021c1d00068c3ff Mon Sep 17 00:00:00 2001
From: Peter Kurfer <peter.kurfer@googlemail.com>
Date: Tue, 13 Jun 2023 22:13:33 +0200
Subject: [PATCH] feat(coder): enable wildcard forwarding

---
 infrastructure/lb.tf                          | 7 ++++---
 k8s/roles/coder/templates/values.coder.yml.j2 | 3 +++
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/infrastructure/lb.tf b/infrastructure/lb.tf
index 54b7905..77d7235 100644
--- a/infrastructure/lb.tf
+++ b/infrastructure/lb.tf
@@ -17,8 +17,8 @@ resource "hcloud_load_balancer_target" "k8s_lb_target" {
   use_private_ip   = true
 }
 
-resource "hcloud_managed_certificate" "icb4dc0de_20230417_001" {
-  name         = "icb4dc0de_20230417_001"
+resource "hcloud_managed_certificate" "icb4dc0de_20230613_001" {
+  name         = "icb4dc0de_20230613_001"
   domain_names = [
     "icb4dc0.de",
     "*.icb4dc0.de",
@@ -26,6 +26,7 @@ resource "hcloud_managed_certificate" "icb4dc0de_20230417_001" {
     "*.buildr.icb4dc0.de",
     "*.prskr.icb4dc0.de",
     "*.fider.icb4dc0.de",
+    "*.ide.icb4dc0.de",
     ]
   labels = {
   }
@@ -57,7 +58,7 @@ resource "hcloud_load_balancer_service" "k8s_lb_svc_https" {
   http {
     redirect_http = true
     certificates = [
-      hcloud_managed_certificate.icb4dc0de_20230417_001.id
+      hcloud_managed_certificate.icb4dc0de_20230613_001.id
     ]
   }
 }
diff --git a/k8s/roles/coder/templates/values.coder.yml.j2 b/k8s/roles/coder/templates/values.coder.yml.j2
index 8ea2477..bb4096f 100644
--- a/k8s/roles/coder/templates/values.coder.yml.j2
+++ b/k8s/roles/coder/templates/values.coder.yml.j2
@@ -3,7 +3,10 @@ coder:
   ingress:
     enable: true
     host: ide.icb4dc0.de
+    wildcardHost: "*.ide.icb4dc0.de"
   env:
+    - name: CODER_WILDCARD_ACCESS_URL
+      value: '*.ide.icb4dc0.de'
     - name: CODER_ACCESS_URL
       value: "https://ide.icb4dc0.de"
     - name: CODER_PG_CONNECTION_URL