Before you add a custom domain

The server needs HTTPS on, and port 80 open to the internet for the test of Let's Encrypt.

Who connects to which port

You need	How
HTTPS on the server	ferryd runs with `--https-addr 0.0.0.0:443` and `--acme-email`.
Port 80 open to the internet	The proxy of the server listens on it: `--proxy-addr 0.0.0.0:80`.
A web service or a static site	Private services, workers and cron jobs cannot have domains.

Without the two HTTPS options, the domain works over HTTP only. See Production setup.

Why port 80

Let’s Encrypt connects to port 80 to validate the domain. The port of your site does not change this.

It asks for http://shop.example.com/.well-known/acme-challenge/…. The proxy answers with the key authorization.

Custom domains & HTTPS

Serve a web service or a static site on your own domain, with a certificate from Let's Encrypt.

Create the DNS record

Point the custom domain to the server with a CNAME record or an A record.