Wildcard custom domains

A wildcard domain lets every subdomain of your domain — app.example.com, api.example.com, anything.example.com — reach the same service without adding each one individually. Simplifyd Cloud provisions a single wildcard TLS certificate that covers all of them.

When to use a wildcard domain

If you only need a small fixed set of subdomains, adding them individually as standard custom domains may be simpler.

Prerequisites

• A service with at least one ingress configured.
• Access to your domain's DNS settings (your registrar or DNS provider).
• Your DNS provider must support CNAME records on * and _acme-challenge subdomains. Most do.

Adding a wildcard domain

1. Click the service node on the canvas to open the service panel.
2. Go to the Settings tab.
3. In the Networking section, click Custom Domain.
4. Enter the wildcard form of your domain: *.example.com.
5. Click Apply in the Apply Changes bar.

Simplifyd Cloud will display two DNS records you need to create.

Configuring DNS

Wildcard domains require two DNS records — one for traffic routing and one for TLS certificate validation. Both must be in place before the domain becomes active.

Record 1 — traffic routing

Routes all subdomain traffic to your service.

Record 2 — certificate validation

Lets Simplifyd Cloud prove it controls your domain when the wildcard certificate is issued. Without this record, no certificate can be issued and the domain will not serve HTTPS.

Why this record is needed

To issue a wildcard certificate, the certificate authority checks for a proof record at _acme-challenge.example.com. Simplifyd Cloud cannot write into your DNS zone, so the CNAME redirects that one lookup to a hostname Simplifyd Cloud does control and can answer on your behalf. Nothing else in your zone is delegated.

Waiting for propagation

DNS changes can take a few minutes to several hours to propagate depending on your provider and TTL settings. Simplifyd Cloud checks the CNAME delegation automatically and begins issuing the certificate once both records are detected.

You can monitor progress in the Settings tab — the domain status will update in real time.

Certificate status

If the status stays on Error, verify:

1. The * CNAME points to the Simplifyd-provided value (not your own server).
2. The _acme-challenge CNAME points to the full _acme-challenge.…simplifyd.net value, with the prefix included.
3. No conflicting NS record exists on _acme-challenge.example.com.

Limitations

• Apex domain not supported. A wildcard *.example.com does not cover the root example.com itself. If you need the apex, add it as a separate standard custom domain.
• Single level only. *.example.com matches foo.example.com but not foo.bar.example.com. Deeper nesting requires a separate wildcard such as *.bar.example.com.
• One wildcard per ingress. Each ingress supports one wildcard domain. You can still combine it with individual custom domains on the same ingress.

Removing a wildcard domain

1. Open the service panel → Settings tab.
2. Find the wildcard domain entry and click the trash icon next to it.
3. Click Apply to confirm.

After removal, subdomain traffic will no longer reach your service. Remove or update both DNS records (* CNAME and _acme-challenge CNAME) at your DNS provider to avoid dangling pointers.