I'm not sure about wildcard certs but I use this container to dole out letsencrypt certs for web services and it's fairly straightforward compared to traefik or something: https://github.com/lucaslorentz/caddy-docker-proxy
Caddy docs: https://caddyserver.com/docs/quick-starts/reverse-proxy