I’m not sure about wildcard certs but I use this container to dole out letsencrypt certs for web services and it’s fairly straightforward compared to traefik or something: github.com/lucaslorentz/caddy-docker-proxy

Caddy docs: caddyserver.com/docs/quick-starts/reverse-proxy