Custom domains
Serve a service on your own domain, with DNS records Raseef checks for you and a certificate it renews.
Before you start
- The service is set to Public HTTP. See Public HTTP.
- Your email is confirmed.
- You are an owner of the workspace.
- You can edit the DNS records of the domain.
Add a domain
Add it to the service
In the service's Domains, under Custom domains, enter the name, like www.example.com or example.com, and choose Add domain.
Create the DNS records
The console lists the exact records to create, with a copy button for each value. Once the domain is live they are folded away under Show DNS records.
| Purpose | Type | Name | Value |
|---|---|---|---|
Point a subdomain (www.example.com) | CNAME | www | edge.raseef.run |
Point the root domain (example.com) | A | @ | Raseef's address, shown in the console |
| Prove you own it | TXT | _raseef-verification.www | raseef-verify=… |
| Issue its certificate | CNAME | _acme-challenge.www | …acme.raseef.run |
Wait for it to go live
Raseef checks the records every minute and the console updates by itself:
| Status | Meaning |
|---|---|
| Waiting for DNS records | Each record shows ✓ Found, ✗ Not found or ✗ Wrong value. |
| Issuing certificate | The records are right; the certificate is being issued. |
| Going live | Every gateway is loading the certificate. |
| Live | The domain serves your app over HTTPS. |
It usually takes a few minutes once your DNS provider publishes the records.
DNS tips
- IPv4 only. Delete any
AAAArecord for the name; the console asks you to while one exists. - No proxy in front. If your DNS provider can proxy traffic (Cloudflare's orange cloud), turn it off for the name, or the check fails.
- CAA records. Certificates come from Let's Encrypt. If your domain has CAA records, one of them must allow
letsencrypt.org. - Root and
wwware separate. Add each name you want served. - No wildcards.
*.example.comis not supported. - The verification value is valid for 7 days. If it expires before the records are found, New verification value makes a new one.
Certificates
Raseef issues a certificate for each domain and renews it automatically; the panel shows until when the current one is valid. If renewal is at risk, for example because a record was removed, the domain shows Needs attention.
After a domain is live, Raseef keeps checking its records every hour.
Remove a domain
Remove domain stops serving it at once. Then delete its three DNS records, above all the _acme-challenge record,
which allows certificates to be issued for the name.
Limits
- A name can be used by one Raseef account only.
- Names under
raseef.runandraseef.dev, internal names and IP addresses cannot be added. - How many domains you can add depends on your plan; see pricing.