diff --git a/docker-compose.yaml b/docker-compose.yaml
index c1c7b47..96c8bff 100755
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -16,6 +16,7 @@ services:
     labels:
       - "traefik.http.routers.traefik-api.rule=Host(`traefik.vaala.tech`)"
       - "traefik.http.routers.traefik-api.middlewares=traefik-forward-auth"
+      - "traefik.http.routers.traefik-api.tls.domains[0].sans=*.vaala.tech"
       - "traefik.http.routers.traefik-api.tls=true"
       - "traefik.http.routers.traefik-api.tls.certresolver=myresolver"
       - "traefik.http.services.traefik-api.loadbalancer.server.port=8080"
@@ -32,6 +33,7 @@ services:
       - traefik
     labels:
       - "traefik.http.routers.traefik-forward-auth.rule=Host(`auth.vaala.tech`)"
+      - "traefik.http.routers.traefik-forward-auth.tls.domains[0].sans=*.vaala.tech"
       - "traefik.http.routers.traefik-forward-auth.tls.certresolver=myresolver"
       - "traefik.http.routers.traefik-forward-auth.middlewares=traefik-forward-auth"
       - "traefik.http.routers.traefik-forward-auth.tls=true"
@@ -48,6 +50,7 @@ services:
       - traefik
     labels:
       - "traefik.http.routers.whoami.rule=Host(`whoami.vaala.tech`)"
+      - "traefik.http.routers.whoami.tls.domains[0].sans=*.vaala.tech"
       - "traefik.http.routers.whoami.middlewares=traefik-forward-auth"
       - "traefik.http.routers.whoami.tls=true"
       - "traefik.http.routers.whoami.tls.certresolver=myresolver"