Bind a custom domain with managed TLS

Before you start

• A project with a successful deployment.
• Access to the DNS zone for the domain.
• A host name such as your API hostname or your application hostname that you want to route to Apex.

1. Add the domain

Open Project → Domains and add the exact hostname. Apex shows the required DNS record and verifies ownership before enabling the production certificate.

2. Publish the DNS record

Type: CNAME
Name: api
Target: proxy.apex.edge
TTL: Auto

Use the record shown for your project rather than copying an example from another environment. DNS propagation time depends on the resolver and the TTL already published for the name.

3. Verify TLS

After verification, Apex provisions the certificate and attaches it to the route. Renewal is handled by the platform; no certificate files belong in your repository.

Production checklist

• Confirm the Apex project and hostname use the intended environment.
• Confirm both HTTP and HTTPS redirects behave as expected.
• Keep a tested rollback deployment available before changing a primary production domain.