Never prepend www to subdomains, only to the bare apex

Shipped

July 7, 2026 at 8:47 PM UTC

Author

Kamo

Commit

2a763d8

The catch-all redirected ANY non-alias host to https://www.<host>, which is correct for the bare apex (kamocrm.com -> www.kamocrm.com) but wrong for a subdomain: desktop.kamocrm.com was 308'd to www.desktop.kamocrm.com, a host that doesn't resolve. This hit any subdomain whose Traefik route hadn't rolled out yet. Now only 2-label apexes get www; unknown subdomains scheme-upgrade and pass through so Traefik's own host route can serve them.