Traefik ACME: Why DNS‑01 Is the Safe Bet for Wildcard Certs
DNS‑01 challenges let Traefik issue wildcard certificates without exposing ports 80/443. This post shows a complete static config, Kubernetes IngressRouteTLS wiring, and a verification checklist to avoid Let’s Encrypt rate limits.