<!-- llms-txt: https://hydron.app/llms.txt -->
<!-- llms-full-txt: https://hydron.app/llms-full.txt -->
<!-- canonical: https://hydron.app/docs/domains-ssl -->

# Domains & SSL

Hydron automatically handles domain configuration and SSL certificate provisioning for your deployed applications.

## Default domains

Every deployment on Hydron gets a default subdomain on `hydron.space`:

~~~
https://your-app-name.hydron.space
~~~

This domain is automatically configured with SSL and is immediately available after deployment.

## Custom domains

You can connect your own domain to any deployed service. Hydron supports:

- **Root domains** — `example.com`
- **Subdomains** — `app.example.com`, `api.example.com`
- **Wildcard subdomains** — `*.example.com`

### Setting up a custom domain

1. In the project chat, tell the AI: "Configure my domain example.com for this deployment"
2. The AI provides DNS records to add at your domain registrar
3. Add the DNS records (typically an A record or CNAME)
4. Once DNS propagates, Hydron automatically provisions an SSL certificate

### DNS record types

| Record Type | When to use |
|-------------|-------------|
| **A record** | Point a root domain (`example.com`) to your server's IP |
| **CNAME** | Point a subdomain (`app.example.com`) to your Hydron domain |

### DNS propagation

DNS changes can take anywhere from a few minutes to 48 hours to propagate globally. In most cases, changes are visible within 5-30 minutes. Hydron will verify the DNS configuration and let you know when it's ready.

## SSL certificates

Hydron automatically provisions and manages **free SSL certificates** for all your domains. This includes:

- **Automatic issuance** — Certificates are provisioned once DNS is configured
- **Auto-renewal** — Certificates are renewed before they expire
- **HTTPS redirect** — HTTP traffic is automatically redirected to HTTPS
- **Modern TLS** — TLS 1.2 and 1.3 with secure cipher suites

You don't need to manage certificates manually — it's all handled automatically.

## Multiple domains

You can point multiple domains to the same deployment:

- `example.com` → your app
- `www.example.com` → your app
- `app.example.com` → your app

Each domain gets its own SSL certificate.

## Domain management through OVH

For domains registered through Hydron's OVH integration, you get additional DNS management capabilities directly within the platform. The AI can configure DNS records automatically without needing you to log into a separate domain registrar.

## Troubleshooting

**SSL certificate not provisioning?**
- Verify DNS records are correct: `dig example.com` should show your server's IP
- Wait for DNS propagation (up to 48 hours in rare cases)
- Ensure no CAA records block certificate issuance

**Domain not resolving?**
- Check that the A record points to the correct server IP
- Verify there's no conflicting AAAA (IPv6) record
- Clear your local DNS cache: `sudo dscacheutil -flushcache` (macOS) or `sudo systemd-resolve --flush-caches` (Linux)

**Mixed content warnings?**
- Ensure all resources in your app use HTTPS URLs
- Update hardcoded HTTP URLs to use protocol-relative URLs or HTTPS