Skip to content
EN

Put an app on your own domain

Open a published app on a domain of your own, such as shop.example.com, with two DNS records and a certificate kvyk.ai gets for you.

Every published app has its own address on kvyk.app. You can also open it on a domain of your own, such as shop.example.com. The app works the same there: it shows its Live version, to the same people, and they sign in on that domain.

Only Builders and Administrators add domains. An app can have up to five.

  • A domain your organisation holds, and access to its DNS settings, usually at the company where you registered it.
  • An app that is published. You can add the domain before, but it shows the app only once Live has a version.
  1. Open the app’s page from Apps in the sidebar.
  2. Under Your own domain, type the domain, such as shop.example.com, and choose Add domain.
  3. kvyk.ai asks you to confirm, because the app opens there as soon as its records are set. Choose Add it.

The domain appears in the table as Waiting for its records, with the two records to add below it.

At the company where you manage the domain’s DNS, add both records exactly as the app’s page shows them:

TypeNameValue
CNAMEshop.example.comthe app’s own address, such as shop.bakery.kvyk.app
TXT_kvyk.shop.example.comkvyk-verify= followed by the domain’s code
  • The CNAME sends visitors of your domain to the app.
  • The TXT record shows that the domain is yours. Only someone who can change the domain’s DNS can add it, so nobody else can put your domain on their app.

Some providers want only the first part of the name (shop and _kvyk.shop) and add the domain themselves.

DNS allows no CNAME on a domain itself, such as example.com. For such a domain the page asks for an ALIAS or ANAME record instead, which some providers call a flattened CNAME, with the same value. If your provider has none, use www.example.com for the app and let your provider send example.com there.

kvyk.ai looks the records up every few minutes and verifies the domain as soon as it finds both. To look now, choose Verify beside the domain. Until both are found, the page says what is still missing, such as No TXT record was found at _kvyk.shop.example.com. New records can take from a few minutes to a few hours to be seen everywhere.

Once the domain is Verified, its name in the table links to the app. The first visit can take a few seconds longer: kvyk.ai gets the domain its own certificate then, so it opens over https.

People open the app on your domain and sign in there, as on the app’s own address: members with Sign in with kvyk, customers of a public app with the code or the link in their mail, and they stay on your domain. Signing in on one address does not sign them in on the other: they sign in once on each.

kvyk.ai looks at a verified domain’s records again every few hours. When one of them is gone or changed, the domain shows No longer set up with the reason, and the app no longer opens there. Put the records back and choose Verify, or wait for the next check.

kvyk.ai also checks that the domain still has a valid certificate. When it could not get one, or could not renew it in time, the domain shows Certificate failing with the reason. The app still opens there, but browsers warn people away until the certificate is in order. This is most often a CAA record on the domain that allows other certificate authorities only. Remove it, or add one beside it with the value 0 issue "letsencrypt.org", and check that the domain’s two records are still in place. kvyk.ai keeps trying on its own.

When a verified domain stops working, its records or its certificate, the organisation’s Administrators and the person who added the domain get one mail. It says what is wrong and lists the exact records to put back. Once the domain works again, they get one more mail. Meanwhile the app keeps opening at its own kvyk.app address.

A domain is verified for one app at a time. To move it to another app, remove it here and add it there. If another organisation’s app on kvyk.ai has the domain, it moves to yours once that app’s records no longer hold, as soon as your records are in place.

Choose Remove beside the domain and confirm. The app no longer opens there, at once. You can then remove its two records at your DNS provider.

Adding, verifying and removing a domain, and a domain or its certificate failing and working again, are all in the event log.