Domains
Every branch with an edge has a public address of its own, made for it, over HTTPS. You can also serve a branch at a domain you own, next to that address. OmniArc issues and renews the certificate.
# Bind a domain
omniarc arc domain add shop production shop.example.com
The arguments are the arc, the branch, and your domain; put your own in place of shop.example.com. It needs a key with the owner role. It prints the two DNS records to create at your DNS provider:
shop.example.com (waiting_for_records)
create these DNS records:
shop.example.com CNAME <hex>.arc.omniarc.eu
_acme-challenge.shop.example.com CNAME <hex>.acme.arc.omniarc.eu
The first sends visitors to the branch's own address, the one omniarc arc branch url prints. The second lets OmniArc prove to the certificate authority that it may issue a certificate for your domain, now and at every renewal.
Create both. They are checked every five minutes. Once they are found the domain moves to cert while its certificate is issued, then to ready, and it serves.
# Watch it
omniarc arc branch url shop production
Prints the branch's own address, then each of its domains with its state and records, and, while one waits, what its names resolved to at the last check.
# What can be bound
- A subdomain, such as
www.example.comorshop.example.com. A bareexample.comcannot be: a CNAME cannot sit at the top of a domain. - Any branch, not only production:
staging.example.comon astagingbranch works the same way. - Up to 15 domains on one branch.
- A domain is bound to one branch at a time.
# Remove a domain
omniarc arc domain remove shop production shop.example.com
The branch's own address keeps working. Delete the two DNS records afterwards.