From cbd4ab44a5d40117eb2d45f2a0fcaec2c8491d65 Mon Sep 17 00:00:00 2001
From: Mark Henderson <mark@getacquired.com>
Date: Thu, 30 Apr 2026 19:02:45 -0700
Subject: [PATCH] fix: use letsencrypt-dns resolver for vibn-dev preview
 Traefik routes

The *.preview.vibnai.com wildcard cert is issued via DNS-01 and stored
under the letsencrypt-dns resolver. Using letsencrypt (HTTP challenge)
would cause Traefik to attempt individual per-subdomain certs instead
of using the existing wildcard.

Made-with: Cursor
---
 lib/dev-container.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/dev-container.ts b/lib/dev-container.ts
index 0b939bef..f1f09ad8 100644
--- a/lib/dev-container.ts
+++ b/lib/dev-container.ts
@@ -162,7 +162,7 @@ function renderDevCompose(projectSlug: string, projectId: string): string {
     traefikLabels.push(`"traefik.http.routers.${router}.rule=Host(\`${host}\`)"`);
     traefikLabels.push(`"traefik.http.routers.${router}.entrypoints=https"`);
     traefikLabels.push(`"traefik.http.routers.${router}.tls=true"`);
-    traefikLabels.push(`"traefik.http.routers.${router}.tls.certresolver=letsencrypt"`);
+    traefikLabels.push(`"traefik.http.routers.${router}.tls.certresolver=letsencrypt-dns"`);
     traefikLabels.push(`"traefik.http.services.${router}.loadbalancer.server.port=${port}"`);
     traefikLabels.push(`"traefik.http.routers.${router}.service=${router}"`);
   }