Domain Management¶
Domain management covers adding and configuring domains, subdomains, and domain aliases for hosting subscriptions.
Overview¶
Domains¶
The domain table shows all configured domains:
| Column | Description |
|---|---|
| Domain | Full domain name |
| Type | Primary domain, Additional domain, or Alias |
| Customer | Assigned customer |
| Site | Associated website |
| SSL | SSL status (active/inactive) |
| DKIM | DKIM status |
| Created | Creation date |
Add Domain¶
- Click Add Domain
- Fill out the form:
| Field | Required | Description |
|---|---|---|
| Subscription | Yes | Associated hosting subscription |
| Domain | Yes | Domain name (e.g. example.com) |
| Website | Yes | Assign to an associated website |
- Click Add
The system automatically configures:
- Nginx vhost entry for the domain
- DNS zone in PowerDNS (if enabled)
- SSL certificate via Let's Encrypt
DNS Settings
Make sure the domain's DNS records point to your server before requesting an SSL certificate.
Domain Redirect¶
Domains can be configured as redirects. No web space is needed — the domain redirects directly to the target URL.
Set Up a Redirect¶
- Create a domain or edit an existing one
- Set the Status to Redirect
- Enter the Redirect URL (e.g.
https://new-domain.com) - Select the Redirect Type:
| Type | Description |
|---|---|
| 301 — Permanent | Search engines adopt the new URL permanently. Recommended for permanent moves. |
| 302 — Temporary | Search engines keep the old URL. For temporary redirects. |
- Click Save
The system automatically creates an Nginx vhost that performs the redirect. No Linux user, PHP-FPM pool, or document root required.
SSL for Redirects¶
Redirect domains can have SSL certificates. This is important so that https://old-domain.com correctly redirects to the target URL without a browser error.
- Navigate to SSL Certificates
- Find the redirect domain
- Click Enable SSL
ACME Challenge
The redirect vhost includes a /.well-known/acme-challenge/ location so Let's Encrypt can issue the certificate before the redirect becomes active.
Changing Status¶
When a redirect is no longer needed, change the status back to Active or Disabled. The redirect vhost is automatically removed.
Enable SSL¶
- Select a domain in the table
- Click Enable SSL
- The system automatically requests a Let's Encrypt certificate
Prerequisites:
- The domain must point to the server via DNS (A or AAAA record)
- Port 80 must be reachable (for ACME challenge)
Automatic Renewal
SSL certificates are automatically renewed before expiration. The Certbot timer regularly checks all certificates.
Configure DKIM¶
DKIM (DomainKeys Identified Mail) digitally signs outgoing emails:
- Select a domain
- Click Enable DKIM
- The system generates a DKIM key
- The required DNS TXT record is displayed
If PowerDNS is active, the DKIM record is automatically added to the DNS zone.
Email Deliverability
Enable DKIM together with SPF and DMARC for optimal email deliverability.
Subdomains¶
Subdomains are created through the subdomain management:
Create Subdomain¶
- Navigate to Subdomains
- Click Create Subdomain
| Field | Required | Description |
|---|---|---|
| Subdomain | Yes | Prefix (e.g. shop for shop.example.com) |
| Domain | Yes | Parent domain |
| Document Root | No | Custom directory (default: subdirectory) |
| PHP Version | No | Custom PHP version possible |
Delete Subdomain¶
- Click the Delete icon
- Confirm the deletion
Domain Aliases¶
Domain aliases redirect a domain to an existing website:
Create Alias¶
- Navigate to Domain Aliases
- Click Create Alias
| Field | Required | Description |
|---|---|---|
| Alias Domain | Yes | The additional domain (e.g. example.net) |
| Target Site | Yes | Website the alias points to |
| Type | Yes | Redirect (301) or Mirror |
Redirect: Visitors are redirected to the primary domain via a 301 redirect.
Mirror: The website is displayed identically under both domains.
Delete Alias¶
- Click the Delete icon
- Confirm the deletion
Delete Domain¶
- Click the Delete icon in the action column
- Confirm the deletion
When deleting, the following are removed:
- Nginx vhost entry
- DNS zone (if present)
- SSL certificate
- DKIM configuration