console: allow caddy issue certs for slug subdomains

webapps/console/pages/api/admin/domains.ts

@@ -2,6 +2,8 @@ import { Api, nextJsApiHandler } from "../../../lib/api";
 import { db } from "../../../lib/server/db";
 import { ApiError } from "../../../lib/shared/errors";
 
+//For Caddy to allow issuing certificates for a domain, it must be present in the domains array of a stream object.
+//or it must be a subdomain of the data domain
 export const api: Api = {
   GET: {
     auth: false,
@@ -14,6 +16,11 @@ export const api: Api = {
       if (!domain) {
         throw new ApiError("missing required parameter", {}, { status: 400 });
       }
+      const dataDomain = process.env.DATA_DOMAIN;
+      if (domain === dataDomain || domain.endsWith("." + dataDomain)) {
+        //data domain and subdomains are always allowed
+        return;
+      }
       const stream = await db.prisma().configurationObject.findFirst({
         where: {
           type: "stream",