• 0 Posts
  • 17 Comments
Joined 1 year ago
cake
Cake day: July 6th, 2023

help-circle







  • I don’t think I’ve ever come across a DNS provider that blocks wildcards.

    I’ve been using wildcard DNS and certificates to accompany them both at home and professional in large scale services (think hundreds to thousands of applications) for many years without an issue.

    The problem described in that forum is real (and in fact is pretty much how the recent attack on Fritz!Box users works) but in practice I’ve never seen it being an issue in a service VM or container. A very easy way to avoid it completely is to just not declare your host domain the same as the one in DNS.








  • I’ve been using Posteo with my own domain for a few years.

    You do need an email forwarder in addition to the hosting since, as you noticed, they don’t support that use-case natively.

    My DNS provider, LuaDNS, does that for me. I pay for their Basic tier (US$29/year) but only because I’m using a lot more than what the free tier provides. I did get away with free for about a year though, so that could in fact be sufficient for you, if you decide to go that route.