Not sure what mkList even was supposed to do...

hosts.nix

@@ -20,6 +20,7 @@ in
     ];
     config = {
       sonarr.domain = "sonarr.${hlConfig.domain}";
+      traefik.wildcardDomains = [ hlConfig.domain ];
     };
     stateVersion = "24.05";
   };

roles/traefik.nix

@@ -79,12 +79,10 @@
 
                   tls = {
                     certResolver = "letsencrypt";
-                    domains = mkList (
-                      map (domain: {
-                        main = domain;
-                        sans = [ "*.${domain}" ];
-                      }) cfg.wildcardDomains
-                    );
+                    domains = map (domain: {
+                      main = domain;
+                      sans = [ "*.${domain}" ];
+                    }) cfg.wildcardDomains;
                   };
                 };
               };