Constellation, Spacedust, Slingshot, UFOs: atproto crates and services for microcosm

reflector#

a tiny did:web service server that maps subdomains to a single service endpoint

receiving requests from multiple subdomains is left as a problem for the reverse proxy to solve, since acme wildcard certificates (ie. letsencrypt) require the most complicated and involved challenge type (DNS).

caddy has good support for configuring the wildcard DNS challenge with various DNS providers, and also supports on-demand provisioning via the simpler methods.

if you only need a small fixed number of subdomains, you can also use certbot or otherwise individually configure them in your reverse proxy.