From 0893da04555042b2969b5c4991b1659125064cdf Mon Sep 17 00:00:00 2001 From: Spike Curtis Date: Thu, 2 Jan 2025 13:35:34 +0400 Subject: [PATCH 1/2] docs: adds note about TLD and wildcards --- docs/admin/setup/index.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/admin/setup/index.md b/docs/admin/setup/index.md index 527c33adc3706..63027f13a75bb 100644 --- a/docs/admin/setup/index.md +++ b/docs/admin/setup/index.md @@ -44,6 +44,10 @@ coder server or running [coder_apps](../templates/index.md) on an absolute path. Set this to a wildcard subdomain that resolves to Coder (e.g. `*.coder.example.com`). +> Note: We do not recommend using a top-level-domain for Coder wildcard access (for example +> `*.workspaces`), even on private networks with split-DNS. Some browsers consider these "public" +> domains and will refuse Coder's cookies, which are vital to the proper operation of this feature. + If you are providing TLS certificates directly to the Coder server, either 1. Use a single certificate and key for both the root and wildcard domains. From 99edf8a58b18d9eb20087009fac376388cc296f4 Mon Sep 17 00:00:00 2001 From: Spike Curtis Date: Thu, 2 Jan 2025 09:54:22 +0000 Subject: [PATCH 2/2] fmt --- docs/admin/setup/index.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/admin/setup/index.md b/docs/admin/setup/index.md index 63027f13a75bb..9429db6cfebac 100644 --- a/docs/admin/setup/index.md +++ b/docs/admin/setup/index.md @@ -44,9 +44,10 @@ coder server or running [coder_apps](../templates/index.md) on an absolute path. Set this to a wildcard subdomain that resolves to Coder (e.g. `*.coder.example.com`). -> Note: We do not recommend using a top-level-domain for Coder wildcard access (for example -> `*.workspaces`), even on private networks with split-DNS. Some browsers consider these "public" -> domains and will refuse Coder's cookies, which are vital to the proper operation of this feature. +> Note: We do not recommend using a top-level-domain for Coder wildcard access +> (for example `*.workspaces`), even on private networks with split-DNS. Some +> browsers consider these "public" domains and will refuse Coder's cookies, +> which are vital to the proper operation of this feature. If you are providing TLS certificates directly to the Coder server, either