One DNS record covers the whole box: *.example.com → 203.0.113.10 . I set it once, and publishing a service has not involved DNS since. I pick a name, and the name already resolves. What's left is a form in Nginx Proxy Manager (NPM) with four fields that matter: the domain, the container name, the container port, and a checkbox that requests a certificate. That is the whole act of publishing. Fill it in, save, and the hostname is serving HTTPS from a container that was never exposed to any...