Traefik Swarm Wildcard Setup

I need Docker Swarm on my on-premise Linux servers to route traffic through Traefik using a single Let’s Encrypt wildcard certificate.

I'll provide a manjaro linux virtualbox machine for download as a starting point.

What is missing is a clean, repeatable bash script that (after being configured with domainname email address, api code, credentials etc):

• installs docker
• initializes docker swarm (manager/worker configurable)
• Installs and configures Traefik (latest preferred) as the ingress controller
• Issues a Let’s Encrypt wildcard certificate for my domain via the appropriate DNS-01 challenge and stores it in a persistent volume
• Automatically renews the certificate without downtime and rolls the renewal out to running services
• installs traefik/whoami as a separate service as demonstration of function (new subdomain gets served by traefik with the wildcard certificate)
• installs lighttpd or whatever as a separate service as demonstration of function (new subdomain gets served by traefik with the wildcard certificate)

the bash script should be concise so I can reproduce the setup on additional nodes

you can use whichever dynamic dns provider as long as it's free

Please keep firewall rules, DNS changes, and any required labels or constraints explicit in the final documentation so I can maintain the cluster after the initial hand-off.

please make sure that the script provided works out of the box (after being configured) on the original VM provided.