Custom Domains & SSL

Kuberfy uses Traefik as an automated reverse proxy. When you attach a domain to an application, Traefik detects the configuration in real-time, configures the routing rule, and requests a free Let's Encrypt SSL certificate.

1. Adding a Domain in Kuberfy

Navigate to your application in the Kuberfy dashboard.
Go to the Domains section.
Enter your domain or subdomain (e.g. api.yourdomain.com or app.test.com).
Click Add Domain and redeploy your application.

2. Configuring DNS (Cloudflare)

To point your domain or subdomain to your Kuberfy VPS using Cloudflare:

Option A: Pointing a Specific Subdomain

Type	Name	IPv4 Address	Proxy Status
`A`	`api` (or your subdomain)	`YOUR_VPS_IP`	Proxied 🟧 (or DNS Only ⬜)

Option B: Wildcard Subdomains (Recommended for multi-app hosting)

If you deploy multiple applications under the same parent domain, add a wildcard record so you never have to edit DNS records again:

Type	Name	IPv4 Address	Proxy Status
`A`	`*`	`YOUR_VPS_IP`	Proxied 🟧

Cloudflare SSL / TLS Encryption Modes

In your Cloudflare dashboard under SSL/TLS ➜ Overview:

Full (Recommended): Encrypts end-to-end between the visitor, Cloudflare, and your server. Works out of the box with Traefik's certificates.
Flexible: Use this if you are not issuing certificates directly on your VPS and want Cloudflare to handle SSL for the browser while connecting over HTTP (port 80) to your server.
Full (Strict): Requires a valid, non-self-signed certificate on the VPS (provided by Traefik + Let's Encrypt).

Direct DNS (Without Cloudflare Proxy)

If you disable the Cloudflare proxy (DNS Only ⬜) or use another DNS provider (Namecheap, GoDaddy, Route53):

Traffic reaches your VPS directly on ports 80 and 443.
Traefik will handle ACME HTTP-01 challenges and issue certificates automatically via Let's Encrypt.