Custom Domains & SSL

Default Subdomains

Every tenant automatically receives a subdomain: https://{tenant-name}.staxa.dev

For multi-service tenants, each service gets: https://{service-name}-{tenant-name}.staxa.dev

The primary service is also accessible at the tenant-level subdomain. The default subdomain is listed on the tenant's Domains tab and can't be removed.

SSL certificates for default subdomains are provisioned automatically using cert-manager and Let's Encrypt. No configuration needed.

Custom Domains

Custom domains let you serve a tenant on your customer's own URL. They're included on the Starter, Growth, and Scale plans, but not on Free.

1. Open the tenant and go to the Domains tab (or use the API: POST /api/v1/tenants/{id}/domains)
2. Click Add a custom domain and enter the domain without http:// or https:// (e.g., app.yourdomain.com)
3. Add the DNS records Staxa shows you at your DNS provider
4. Once the records are visible, Staxa verifies the domain and provisions an SSL certificate automatically

If verification reports that the DNS record isn't visible yet, wait a few minutes for the change to propagate and try again.

Domain and Certificate Statuses

Each custom domain has a domain status:

• pending: Waiting for DNS
• verified: DNS record confirmed
• active: Domain is serving traffic

And a certificate status:

• pending or provisioning: The SSL certificate is being issued
• active: A valid certificate is in place
• failed: The certificate couldn't be issued. Check the DNS records, then remove and re-add the domain if needed.

DNS Configuration

Staxa shows the exact records to add. Typically this is a CNAME record pointing your custom domain at your tenant's default subdomain:

app.yourdomain.com  CNAME  {tenant-name}.staxa.dev

DNS propagation typically takes a few minutes but can take up to 48 hours depending on your DNS provider and TTL settings.