Originally assigned to: @oschwartz10612 on GitHub.
Describe the Bug
Applying a blueprint via Newt fails when the new resource falls under an existing wildcard certificate.
blueprint yaml
public-resources:resource-nice-id-uno:name:this is my resourceprotocol:httpfull-domain:never-gonna-give-you-up.web.domain.comtargets:- site:lively-yosemite-toadhostname:localhostmethod:httpport:8000
and pop out error:
Blueprint applied with errors: SqliteError: UNIQUE constraint failed: certificates.domain
Environment
OS Type & Version: Ubuntu 24.04
Pangolin Version: v1.18.1
Gerbil Version: 1.3.1
Traefik Version: v3.6
Newt Version: v1.12.3
To Reproduce
Set up a wildcard domain (e.g. *.web.domain.com) — not using Traefik auto-generated per-domain cert.
In the dashboard, open Blueprints and add a blueprint with a resource whose full-domain falls under that wildcard, e.g.:
public-resources:resource-nice-id-uno:name:this is my resourceprotocol:httpfull-domain:never-gonna-give-you-up.web.domain.comtargets:- site:lively-yosemite-toadhostname:localhostmethod:httpport:8000
Apply -> fails with SqliteError: UNIQUE constraint failed: certificates.domain.
Expected Behavior
Should be applied normally.
Originally created by @xMikux on GitHub (Apr 30, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/2937
Originally assigned to: @oschwartz10612 on GitHub.
### Describe the Bug
Applying a blueprint via Newt fails when the new resource falls under an existing wildcard certificate.
blueprint yaml
```yaml
public-resources:
resource-nice-id-uno:
name: this is my resource
protocol: http
full-domain: never-gonna-give-you-up.web.domain.com
targets:
- site: lively-yosemite-toad
hostname: localhost
method: http
port: 8000
```
and pop out error:
```
Blueprint applied with errors: SqliteError: UNIQUE constraint failed: certificates.domain
```
### Environment
- OS Type & Version: Ubuntu 24.04
- Pangolin Version: v1.18.1
- Gerbil Version: 1.3.1
- Traefik Version: v3.6
- Newt Version: v1.12.3
### To Reproduce
1. Set up a wildcard domain (e.g. `*.web.domain.com`) — not using Traefik auto-generated per-domain cert.
2. In the dashboard, open **Blueprints** and add a blueprint with a resource whose `full-domain` falls under that wildcard, e.g.:
```yaml
public-resources:
resource-nice-id-uno:
name: this is my resource
protocol: http
full-domain: never-gonna-give-you-up.web.domain.com
targets:
- site: lively-yosemite-toad
hostname: localhost
method: http
port: 8000
```
3. Apply -> fails with SqliteError: UNIQUE constraint failed: certificates.domain.
### Expected Behavior
Should be applied normally.
GiteaMirror
added the bug label 2026-06-13 10:33:53 -05:00
@oschwartz10612 commented on GitHub (Apr 30, 2026):
@xMikux would you be able to do the following? It will help me figure out what is up here.
$ sqlite3 config/db/db.sqlite "select domain,domainId,wildcard,status from certificates;"
<!-- gh-comment-id:4355000753 -->
@oschwartz10612 commented on GitHub (Apr 30, 2026):
@xMikux would you be able to do the following? It will help me figure out what is up here.
```
$ sqlite3 config/db/db.sqlite "select domain,domainId,wildcard,status from certificates;"
```
I also do some test, apply succeeds for resources under *.domain.com, but fails for resources under *.web.domain.com.
<!-- gh-comment-id:4357880442 -->
@xMikux commented on GitHub (May 1, 2026):
I also do some test, apply succeeds for resources under `*.domain.com`, but fails for resources under `*.web.domain.com`.
<img width="664" height="417" alt="Image" src="https://github.com/user-attachments/assets/e980dcae-4113-48c0-b57d-2496c2d85154" />
<img width="670" height="444" alt="Image" src="https://github.com/user-attachments/assets/33758190-7c9c-4ebd-be6b-3adebc0802f4" />
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @xMikux on GitHub (Apr 30, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/2937
Originally assigned to: @oschwartz10612 on GitHub.
Describe the Bug
Applying a blueprint via Newt fails when the new resource falls under an existing wildcard certificate.
blueprint yaml
and pop out error:
Environment
To Reproduce
*.web.domain.com) — not using Traefik auto-generated per-domain cert.full-domainfalls under that wildcard, e.g.:Expected Behavior
Should be applied normally.
@AstralDestiny commented on GitHub (Apr 30, 2026):
sqlite3 config/db/db.sqlite
Fixes some 1.18 stuff, Try again afterwards.
@xMikux commented on GitHub (Apr 30, 2026):
After deleting, the issue still persists.
@xMikux commented on GitHub (Apr 30, 2026):
@oschwartz10612 commented on GitHub (Apr 30, 2026):
@xMikux would you be able to do the following? It will help me figure out what is up here.
@xMikux commented on GitHub (May 1, 2026):
@xMikux commented on GitHub (May 1, 2026):
I also do some test, apply succeeds for resources under
*.domain.com, but fails for resources under*.web.domain.com.