How domains work
Every service on your cluster gets a stable internal hostname automatically. To attach your own domain, you point your DNS to our ingress and we handle everything from there — TLS provisioning, certificate renewal, routing.
What you configure
On your DNS provider, create an A record (or CNAME if you're using a subdomain) pointing to the IP address we provide during onboarding. That's it on your end.
For apex domains (e.g. example.com without www), use an A record. For subdomains, a CNAME works and is easier to manage.
TLS is automatic
Once DNS propagates, cert-manager detects your domain and issues a TLS certificate via Let's Encrypt within minutes. Renewal is fully automated — certificates are rotated 30 days before expiry with no downtime and no action required from you.
Multiple domains
You can attach as many domains as you need to a service. This is common for multi-region setups, white-label products, or when running multiple brands on the same cluster. Contact support to add additional domains.
DNS propagation
DNS changes typically propagate within a few minutes for most providers, but can take up to 48 hours in rare cases. You can check propagation status at whatsmydns.net.