OmniArc docs Menu

Guides

Domains

Every branch with an edge has a public address of its own, made for it, over HTTPS. You can also serve a branch at a domain you own, next to that address. OmniArc issues and renews the certificate.

# Bind a domain

omniarc arc domain add shop production shop.example.com

The arguments are the arc, the branch, and your domain; put your own in place of shop.example.com. It needs a key with the owner role. It prints the two DNS records to create at your DNS provider:

shop.example.com (waiting_for_records)
create these DNS records:
shop.example.com  CNAME  <hex>.arc.omniarc.eu
_acme-challenge.shop.example.com  CNAME  <hex>.acme.arc.omniarc.eu

The first sends visitors to the branch's own address, the one omniarc arc branch url prints. The second lets OmniArc prove to the certificate authority that it may issue a certificate for your domain, now and at every renewal.

Create both. They are checked every five minutes. Once they are found the domain moves to cert while its certificate is issued, then to ready, and it serves.

# Watch it

omniarc arc branch url shop production

Prints the branch's own address, then each of its domains with its state and records, and, while one waits, what its names resolved to at the last check.

# What can be bound

  • A subdomain, such as www.example.com or shop.example.com. A bare example.com cannot be: a CNAME cannot sit at the top of a domain.
  • Any branch, not only production: staging.example.com on a staging branch works the same way.
  • Up to 15 domains on one branch.
  • A domain is bound to one branch at a time.

# Remove a domain

omniarc arc domain remove shop production shop.example.com

The branch's own address keeps working. Delete the two DNS records afterwards.