I have updated this setup with support for wildcard certificates which I have described in this post: