Domains

Domain changes apply at once, without a deploy. Ports 80 and 443 must be reachable from the internet.

Generated domainCopy Anchor Link

Every service gets a free sslip.io domain that already points to the server, with HTTPS. You can change its label, or remove it and generate a new one later.

Custom domainCopy Anchor Link

1. Add the domain, for example app.example.com, to the service.
2. Create the DNS A record the console shows, pointing to the server's public IPv4, at your DNS provider.
3. Once the record resolves, Let's Encrypt issues the certificate. This usually takes under a minute and at most 10.

Nothing is routed until the record resolves. The console checks it in the background, so you can close the dialog and come back later. If your domain has a CAA record, it must allow letsencrypt.org.

PortCopy Anchor Link

HTTPS on 443 is forwarded to the port your container listens on, for example 8080. Set it per domain.