Automatically Create CNAME records for containers served by Caddy?

Create at your dns domain provider a cname record *.cloud.domain.com to your caddy ip and in caddy use always services.cloud.domain.com, service2.cloud.domain.com,..

Use it this way so I don’t need to add to every service a new cname record.

And caddy creates for every service a own cert.. no wildcard ..

Why not just use the Cloudflare Tunnels command line binary?

It can automatically create the CNAMEs

Interesting question actually.

From what I know, there is very few solutions for this purpose. I haven't found a direct way to update DNS records from docker containers, without a lot of crafting.

I toyed with registrator but it's not updated since a long time (https://github.com/gliderlabs/registrator). The idea is to plug container to another backend, etc/consul. For internal traffic, it's good but if you want to publicly expose the zone, probably need to setup a real DNS server as proxy. Well a lots of setup, especially if you want internet exposition .

This guy tried an interesting thing, still involving Consul, but it look like what I could publicly expose on internet: https://ilhicas.com/2023/01/25/Creating-a-core-dns-with-consul-docker-image.html

I've also seen that: https://github.com/rlipscombe/dockerns , wich is interesting for service discovery, but probably not more.

This is good also: https://github.com/phensley/docker-dns

On my side, I started a little python project that watch docker events, scan container labels, and send a nsupdate add/del records to another DNS server that accept dnsupdate. The smartest approach on my side, but it relies on a quick and dirty script I wrote. If I take time to rewrite it, I guess it could be a good solution for every one. Ho and it also solve the dual-dns issue, as you can forward different records to different servers.

If you feel I interested, I can publish my python project :)

I suppose wildcard DNS would not work for you?

I have a *.svr.domain.tld on Google Domains (need to transfer somewhere else), and then on Caddyfile I can register individual foo.svr.domain.tld without touching DNS