1# Custom Domains23## Default Domain45Every organization gets a default domain: `your-org.deno.net`67Apps are accessible at: `your-app.deno.dev`89## Adding a Custom Domain10111. Go to your organization's domains page in the Deno Deploy dashboard122. Click "Add Domain"133. Enter your domain (e.g., `example.com` or `*.example.com` for wildcards)144. Click "Add Domain" to see DNS configuration1516## DNS Configuration1718You have three options for DNS setup:1920### Option 1: ANAME/ALIAS (Recommended)2122Best option if your registrar supports ANAME or ALIAS records.2324| Record Type | Name | Value |25|-------------|------|-------|26| ANAME/ALIAS | `@` | `<your-app>.deno.dev` |27| CNAME | `_acme-challenge` | (provided in dashboard) |2829### Option 2: CNAME3031Works for subdomains (like `api.example.com`) but **not for apex domains** (like `example.com`).3233| Record Type | Name | Value |34|-------------|------|-------|35| CNAME | `api` | `<your-app>.deno.dev` |36| CNAME | `_acme-challenge.api` | (provided in dashboard) |3738### Option 3: A Record3940Most compatible, works with any registrar.4142| Record Type | Name | Value |43|-------------|------|-------|44| A | `@` | (IP provided in dashboard) |45| CNAME | `_acme-challenge` | (provided in dashboard) |4647**Note:** IPv6 is not supported with the A record method.4849## Cloudflare Users5051If using Cloudflare, **disable proxying** (turn off the orange cloud) on the `_acme-challenge` CNAME record. Proxying prevents certificate verification from completing.5253## SSL/TLS Certificates5455### Automatic Certificates (Recommended)5657After DNS verification completes:581. Click "Provision Certificate" in the dashboard592. Let's Encrypt generates your certificate603. Certificates renew automatically6162### Bring Your Own Certificate6364If you need a specific certificate:651. Upload your PEM-formatted certificate file662. Upload your private key file673. **You must manage renewal** - notifications arrive 14 days before expiration6869**Warning:** Expired certificates cause your domain to stop working.7071## Assigning Domains to Apps72731. Go to organization domains page742. Find your domain and click to edit753. Assign it to an application764. Remove assignments from app settings if needed7778## Troubleshooting7980| Issue | Solution |81|-------|----------|82| Verification stuck | Check DNS propagation (can take up to 48 hours) |83| Certificate won't provision | Ensure `_acme-challenge` CNAME is correct and not proxied |84| IPv6 not working | Use ANAME/ALIAS or CNAME instead of A record |8586## Documentation8788- Domains reference: https://docs.deno.com/deploy/reference/domains/