+1 for updating the OP here to include at least a link to the additional step required in order to avoid SSL errors. Once I had this set up using @pfaffman’s link to @brahn’s excellent post it worked perfectly. Thanks to both.
In short:
- DNS: Set up A records for all subdomains that you want to redirect, each pointing to the same IP, of the Discourse instance.
- NGINX rules set up as per this topic, to redirect the traffic.
- LetsEncrypt rules as per Set up Let’s Encrypt with multiple domains / redirects so that there are no SSL errors.