Wildcard SSL and Non-wildcard SSL for the same Dokku app about dokku-letsencrypt HOT 1 CLOSED

This isn't possible due to how the plugin works. If you set a dns provider, then goacme/lego (what we use under the hood) will use that to retrieve a cert for every requested domain. Dokku itself only uses 1 certificate per app when using the letsencrypt plugin + the default nginx router, so we wouldn't be able to accommodate different modes depending on whether the dns is possible to use for a given domain or not.

That said, Dokku's openresty plugin is probably more suited to what you want. It doesn't do dns-based certificate retrieval, but does just-in-time retrieval of certificates for any domain, meaning you don't have to run an extra command to get a cert.

If - for business reasons - you still want to use this app + a different certificate depending on the hostname being requested, consider sponsoring the work. I'm always happy to sit down with users to figure out how Dokku can better enable their workflows while improving the Dokku ecosystem.

from dokku-letsencrypt.