HELP & GUIDES

Custom Domains & Edge TLS Routing

Home
Guides
INGRESS ROUTING & ENCRYPTION

Domain Configuration & Automatic SSL

Cloudilio routes web traffic through an edge reverse proxy powered by Caddy. The proxy obtains and renews TLS certificates from Let's Encrypt or ZeroSSL without manual maintenance.

Step 1: Add Your Domain in the Dashboard

Navigate to your application and open the Domains & SSL tab. Enter your apex domain (e.g. example.com) or subdomain (e.g. api.example.com) and click Add Domain.

Step 2: Configure DNS Records

Sign in to your DNS provider (Cloudflare, Namecheap, Route 53, or GoDaddy) and add the appropriate record:

Domain Type Record Type Host / Name Target Value
Subdomain (e.g. api.example.com) CNAME api <app-slug>.apps.local
Apex / Root (e.g. example.com) A @ <Platform Edge IP>

Step 3: Verification & TLS Provisioning

Click Verify & Provision SSL in the control panel. Cloudilio runs an active DNS lookup. Once the DNS record points to the cluster edge, Caddy completes the HTTP-01 or TLS-ALPN-01 ACME challenge and binds the certificate.

AUTOMATIC RENEWALS
Certificates renew automatically 30 days before expiration. Developers never need to run cron jobs or update Certbot configuration files.

Troubleshooting Domain Verification

  • DNS Propagation Delay: Some DNS providers require up to 10 minutes to publish new CNAME entries globally.
  • Cloudflare Proxy Status: If you manage DNS in Cloudflare, set proxy status to DNS Only (grey cloud) during initial verification so Caddy can reach the ACME challenge server directly.
  • CAA Records: Confirm that your domain does not have CAA records blocking Let's Encrypt or ZeroSSL.