Subchapter 1.4
references/DOMAINS.mdMarkdown3 KBView on GitHub
Every organization gets a default domain: your-org.deno.net
Apps are accessible at: your-app.deno.dev
example.com or *.example.com for wildcards)You have three options for DNS setup:
Best option if your registrar supports ANAME or ALIAS records.
| Record Type | Name | Value |
|---|---|---|
| ANAME/ALIAS | @ | <your-app>.deno.dev |
| CNAME | _acme-challenge | (provided in dashboard) |
Works for subdomains (like api.example.com) but not for apex domains (like
example.com).
| Record Type | Name | Value |
|---|---|---|
| CNAME | api | <your-app>.deno.dev |
| CNAME | _acme-challenge.api | (provided in dashboard) |
Most compatible, works with any registrar.
| Record Type | Name | Value |
|---|---|---|
| A | @ | (IP provided in dashboard) |
| CNAME | _acme-challenge | (provided in dashboard) |
Note: IPv6 is not supported with the A record method.
If using Cloudflare, disable proxying (turn off the orange cloud) on the
_acme-challenge CNAME record. Proxying prevents certificate verification from
completing.
After DNS verification completes:
If you need a specific certificate:
Warning: Expired certificates cause your domain to stop working.
| Issue | Solution |
|---|---|
| Verification stuck | Check DNS propagation (can take up to 48 hours) |
| Certificate won’t provision | Ensure _acme-challenge CNAME is correct and not proxied |
| IPv6 not working | Use ANAME/ALIAS or CNAME instead of A record |