Fully Managed DNS & SSL

Connect Your Custom Domain

Bring your own domain to .git projects. Free SSL certificates, automatic HTTPS, and zero-config DNS verification in under 5 minutes.

Start Configuration →

How It Works

Three simple steps to map any domain to your .git deployment.

1

Add Domain

Navigate to your project settings, enter your domain name, and click "Add". .git will generate the required verification records.

2

Configure DNS

Add the provided CNAME or A records to your domain registrar. TTL is automatically optimized for fast propagation.

3

Verify & Activate

Our system polls for DNS changes every 60s. Once verified, SSL is provisioned automatically and your site goes live.

DNS Configuration

Copy these records to your DNS provider. Replace example.com with your actual domain.

Subdomain (CNAME) — Recommended

TypeNameValueTTL
CNAMEwwwcname.git.devAuto
TXT@git-verify=8f3k2m9x7p3600

Apex / Root Domain (A Records)

TypeNameValueTTL
A@104.21.52.17Auto
A@172.67.189.42Auto
TXT@git-verify=8f3k2m9x7p3600
Note: Some registrars (like Cloudflare) may require you to disable "Proxy/Orange Cloud" for the records to verify correctly. Use DNS-only mode during setup, then enable proxy if desired.

SSL/TLS & Security

✓ Auto-Provisioned Certificates

We automatically request and renew Let's Encrypt certificates for your domain. Zero manual renewal required. Supports DV, EV, and wildcard certificates.

✓ Forced HTTPS & HSTS

All HTTP requests are permanently redirected to HTTPS. Strict-Transport-Security headers are automatically added to improve security posture.

✓ TLS 1.3 & Modern Ciphers

We enforce TLS 1.3 with optimized cipher suites. Deprecated protocols (TLS 1.0/1.1) and weak ciphers are blocked at the edge.

✓ OCSP Stapling

Certificate status checks are stapled at the edge, reducing handshake latency and improving privacy for your users.

Frequently Asked Questions

How long does DNS propagation take?
Typically 1–5 minutes for modern registrars. We poll every 60 seconds and automatically detect when your records are live. In rare cases, it may take up to 48 hours due to ISP caching, but this is extremely uncommon.
Can I use .git with Cloudflare, Route 53, or Namecheap?
Yes, all major DNS providers are supported. We provide exact record formats. If you use Cloudflare, ensure proxy mode is set to "DNS Only" during verification, then switch to "Proxied" afterward if desired.
What happens if my SSL certificate expires?
Certificates are automatically renewed 30 days before expiration. Our system runs daily checks. You'll receive an email alert if renewal encounters an issue, but this is exceptionally rare.
Do I need to configure CAA records?
No. .git uses a private CA integration that doesn't require CAA records. Your domain will provision certificates without any additional DNS configuration beyond the required CNAME/A and TXT records.
Can I add multiple domains to one project?
Yes, up to 10 domains per project on Pro plans, and unlimited on Enterprise. Each domain gets independent SSL, analytics, and deployment previews.

Ready to map your domain?

Connect your custom domain in under 3 minutes. No credit card required.

Open Project Settings →