Quick question about wildcard certs

Hey all, when I setup Pangolin I was unsure if I should put the prefer_wildcard_cert: true in this location or the flag location. Thanks in advance.

domains:
    domain1:
        base_domain: "xxxx.duckdns.org"
        cert_resolver: "letsencrypt"
        prefer_wildcard_cert: true

or,

flags:
    require_email_verification: false
    disable_signup_without_invite: true
    disable_user_create_org: false
    allow_raw_resources: true
    #prefer_wildcard_cert: true
flags:
    require_email_verification: false
    disable_signup_without_invite: true
    disable_user_create_org: false
    allow_raw_resources: true
    prefer_wildcard_cert: true

this is the correct one. the one you have used is an old flag for previous versions