add graphs xhain subdomain

cert/.gitignore

@@ -1,2 +1,4 @@
 # ignore the generated certificates
 acme.json
+*.key
+*.pem

config/traefik.toml

@@ -23,6 +23,17 @@ OnHostRule = false
   [entryPoints.https]
     address = ":443"
       [entryPoints.https.tls]
+        # first certificate is default, serve nonsense to
+        # mitigate TLS probing
+        [[entryPoints.https.tls.certificates]]
+          certFile = "cert/snakeoil.pem"
+          keyFile = "cert/snakeoil.key"
+        [[entryPoints.https.tls.certificates]]
+          certFile = "cert/bitmask.me.origin.pem"
+          keyFile = "cert/bitmask.me.origin.key"
+        [[entryPoints.https.tls.certificates]]
+          certFile = "cert/grun.host.origin.pem"
+          keyFile = "cert/grun.host.origin.key"
 
 [web]
 address = ":8080"
@@ -86,6 +97,9 @@ exposedbydefault = false
   main = "aloneonline.net"
   sans = ["www.aloneonline.net"]
 
+[[acme.domains]]
+  main = "graphs.xhain.space"
+
 # You can define multiple of these blocks, each of which will result in one
 # certificate.
 #[[acme.domains]]