docs: add note about TLD and wildcards (#16008)

spikecurtis · web-flow · commit 18600d3620c4 · 2025-01-02T14:01:28.000+04:00
Adds docs to hopefully help others avoid #15708
diff --git a/docs/admin/setup/index.md b/docs/admin/setup/index.md
@@ -44,6 +44,11 @@ coder server
 or running [coder_apps](../templates/index.md) on an absolute path. Set this to
 a wildcard subdomain that resolves to Coder (e.g. `*.coder.example.com`).
 
+> Note: We do not recommend using a top-level-domain for Coder wildcard access
+> (for example `*.workspaces`), even on private networks with split-DNS. Some
+> browsers consider these "public" domains and will refuse Coder's cookies,
+> which are vital to the proper operation of this feature.
+
 If you are providing TLS certificates directly to the Coder server, either
 
 1. Use a single certificate and key for both the root and wildcard domains.
