From 0893da04555042b2969b5c4991b1659125064cdf Mon Sep 17 00:00:00 2001 From: Spike Curtis Date: Thu, 2 Jan 2025 13:35:34 +0400 Subject: [PATCH 1/2] docs: adds note about TLD and wildcards --- docs/admin/setup/index.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/admin/setup/index.md b/docs/admin/setup/index.md index 527c33adc3706..63027f13a75bb 100644 --- a/docs/admin/setup/index.md +++ b/docs/admin/setup/index.md @@ -44,6 +44,10 @@ coder server or running [coder_apps](../templates/index.md) on an absolute path. Set this to a wildcard subdomain that resolves to Coder (e.g. `*.coder.example.com`). +> Note: We do not recommend using a top-level-domain for Coder wildcard access (for example +> `*.workspaces`), even on private networks with split-DNS. Some browsers consider these "public" +> domains and will refuse Coder's cookies, which are vital to the proper operation of this feature. + If you are providing TLS certificates directly to the Coder server, either 1. Use a single certificate and key for both the root and wildcard domains. From 99edf8a58b18d9eb20087009fac376388cc296f4 Mon Sep 17 00:00:00 2001 From: Spike Curtis Date: Thu, 2 Jan 2025 09:54:22 +0000 Subject: [PATCH 2/2] fmt --- docs/admin/setup/index.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/admin/setup/index.md b/docs/admin/setup/index.md index 63027f13a75bb..9429db6cfebac 100644 --- a/docs/admin/setup/index.md +++ b/docs/admin/setup/index.md @@ -44,9 +44,10 @@ coder server or running [coder_apps](../templates/index.md) on an absolute path. Set this to a wildcard subdomain that resolves to Coder (e.g. `*.coder.example.com`). -> Note: We do not recommend using a top-level-domain for Coder wildcard access (for example -> `*.workspaces`), even on private networks with split-DNS. Some browsers consider these "public" -> domains and will refuse Coder's cookies, which are vital to the proper operation of this feature. +> Note: We do not recommend using a top-level-domain for Coder wildcard access +> (for example `*.workspaces`), even on private networks with split-DNS. Some +> browsers consider these "public" domains and will refuse Coder's cookies, +> which are vital to the proper operation of this feature. If you are providing TLS certificates directly to the Coder server, either pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy