Domains and SSL

Add custom domains, set DNS records, choose certificate type, and mark a default hostname on a Service.

Written By Zoro

Last updated 3 days ago

Domains

Custom domains attach to a Service from the Domains tab. The heading is Domains, with the description: custom domains and SSL for this service.

Prerequisites

  • You control DNS for the hostname you will add.
  • The Service already deploys successfully (TLS issuance depends on a healthy app and correct DNS).

Add a custom domain

  1. Open the Application → Environment → Service → Domains.
  2. Use Add domain (or equivalent) and enter the hostname.
  3. Save so the platform queues domain management work. Toasts often report Added to queue while DNS records are prepared.

DNS records

After you add a domain, the product shows a table of required records:

  • A CNAME from your hostname (or @ / apex rules as shown) to the platform wildcard target the UI displays.
  • Optional TXT records for validation (for example ACME DNS challenges).

Use I've added Records when you are done at the DNS provider. The UI may poll briefly (“fetching domain validation records…”).

Certificate options

Per domain entries support:

  • Letsencrypt automated certificates (default path when enabled).
  • None when you terminate TLS elsewhere or use HTTP-only (not recommended for production).

Auto-regenerate SSL (when shown) controls whether the platform should renew or re-issue certificates when domains change.

Default domain

Mark one hostname as default when the UI offers it. The default domain drives generated URLs and some environment references; switching default may trigger variable updates (the product notifies you while those propagate).

Wildcard and proxy domains

Hostnames that already end with the shared proxy domain behave as managed URLs. Custom domains you bring must follow the DNS table exactly; mismatches cause certificate failures (see troubleshooting).

Screenshots

Recommended captures:

  • Domains tab with the default domain and a custom domain listed.
  • DNS record table with CNAME and TXT rows.
  • Certificate type selector showing Letsencrypt and None.

Related