############################ Notes for future deployments ############################ ******************************* Wildcard certificate generation ******************************* We never resolved the problem generating certificates for domains that were part of the wildcard domain (``*.xchem.diamond.ac.uk``). Although we created a specific domain (``keycloak.xchem.diamond.ac.uk``) it still did not work. We need to understand the wildcard certificate problem if we are to do this again, and expect to be able to use **Keycloak**, and **Squonk**.