Desire

Sub domains work out of the box as much as is reasonably possible

Context

Using auto generated domains does not work with current host config

Example solution direction

Adding *.{domain} to TLS host. this is not tested just theory: