Docs / Domains and SSL

Domains and SSL

Point DNS at your server

At your DNS provider, add an A record for the name you want, such as app.example.com, with your server's public IP address. For IPv6, add an AAAA record too. Changes usually take a few minutes.

Add the domain to the app

In the app, open Domains and enter the full address with its scheme, for example https://app.example.com. To serve several names, list them separated by commas. Save and redeploy.

When you save and deploy, Dekota's proxy requests a certificate from Let's Encrypt for each name. It renews it about 30 days before it runs out.

Redirect www

Add both example.com and www.example.com, then choose which one is main under Redirect. Visitors to the other are sent there with a permanent redirect.

Behind Cloudflare or another proxy

If the record is proxied, set the SSL mode at the proxy to Full (strict). Certificates still renew because the HTTP challenge passes through.

The first certificate is different. Under Full (strict) with Always Use HTTPS, Cloudflare refuses the origin until it has a valid certificate, so the first request can fail with error 526. Issue the certificate first with the record set to DNS only (grey cloud), or use Full until it is issued, then switch to Full (strict) and turn the proxy back on.