DNS propagation is not ours to speed up
How fast a new record spreads depends on your registrar and its TTL. Minutes to hours is normal.
Custom domains
Serve it on the name you already own
Two DNS records and the project answers on your domain. The certificate is issued for you once ownership checks out.
DomainsUp to 20
- domains per project
- DNS records to add
- recheck interval
- failures before release
- certificate issuance
- domain proven end to end
Certificates are only issued for domains that passed verification.
What this is
Customers should only see your name.
Preview links are for testing. The moment you send the link to a customer, it should carry your brand, not ours. Register the domain you already bought, add two records where you bought it, and the project answers there with a valid certificate.
How to use it
Register, point, go live.
Both records are copy-paste. Nothing has to be edited by hand afterwards.
- Register the domain
Add the hostname to the project and receive two verification values.
- Add two records
One CNAME says where to send traffic, one TXT proves the name is yours.
- It turns on
Once both records resolve, the domain activates and the certificate is issued.
What is in the code
The rules the checker follows.
Verification keeps running after activation — ownership is a state, not a one-time event.
- Two records
The CNAME must match exactly and the TXT must equal the whole issued token, not merely contain it.
- 20 per project
One project can answer on several hostnames at once, up to twenty.
- Rechecked every 6 hours
Active domains are re-resolved on a schedule so a name that moved away stops being served.
- Three strikes
After three consecutive failed checks the domain is released instead of left half-broken.
- Certificates gated on state
On-demand issuance is allowed only for verified, active domains, which keeps issuance from being open to anyone.
- Proven once, for real
One real domain was taken end to end — records, certificate, live page — on 2026-07-18.
What it will not do
Things your registrar still owns.
Most domain trouble happens outside our boundary, so here is where the line sits.
Bare domains depend on your provider
Verification uses a CNAME, and many registrars refuse a CNAME on example.com itself. Use a subdomain such as www when that happens.
We do not sell domains
This connects a name you already own. Buying one still happens at a registrar.
Email records are untouched
Only web traffic is handled. Your MX and mail settings stay exactly as they are.
Next
Where to go from here
Owning the domain and owning the repository are the two halves of not being locked in.