Custom domains

Use one DNS verification to put every web app in a Workspace under a domain you control. After the domain is verified, Tokay creates the app addresses and handles HTTPS certificates automatically.

Last updated

Verify the domain once for the Workspace

One verification covers every web app in the Workspace, so you do not repeat DNS setup for each Service.

  1. Open Workspace settings, choose Domains, then select Add domain.
  2. Enter the domain you want to use, such as yourcompany.com or internal.yourcompany.com.
  3. Add the records shown by Tokay wherever your DNS is managed.
    • For subdomains, a wildcard CNAME sends *.yourcompany.com to ingress.tokay.app.
    • For the apex domain, such as yourcompany.com, use the ALIAS or A/AAAA record shown by Tokay. Do not add a normal CNAME at the apex.
  4. Wait for Tokay to verify the records. DNS changes can take time to appear, so a domain that is still pending may only need more time to propagate.

The DNS records belong in the dashboard for the provider that hosts your domain, such as Cloudflare, GoDaddy, or Namecheap.

After verification, every web app in the Workspace gets a canonical address under the domain. Tokay issues and renews the HTTPS certificates.

Choose the right address for each use

You can give people a short address without making scripts or integrations depend on a name you may move later.

Each web app gets a canonical address such as myservice-r4k7x2m9.yourcompany.com. That address is stable unless the Service is recreated. Use it for automation and integrations.

An alias is a name you assign from the Service settings, such as dashboard.yourcompany.com. Aliases are meant for people and can move from one Service to another. Use them in links people open, not in automation.

The apex domain, such as yourcompany.com, is assigned explicitly to one Service. Tokay does not route it automatically.

Webhooks keep their Tokay addresses

Webhook integrations keep the stable address Tokay assigned to them. Custom domains apply to web apps, while webhook URLs continue to use their tokay.app addresses.

Removing a domain leaves the apps online

You can disconnect a custom domain without taking the apps themselves offline. Removing a verified domain immediately removes every canonical address and alias under it, but each app is still available at its tokay.app address.