Skip to content
ZajLibrary
prod 352bb92
Browse

2 · DNS + SSL

TL;DR

Section titled “TL;DR”

Objective — confirm the non-production domain resolves to the server and serves a valid TLS chain before the first release lands, so the deploy doesn’t fail on an unresolved or untrusted host.

Steps at a glance:

  1. Create / confirm the environment URL — The DNS record and certificate are account-level actions — create them in your panel so the selected non-production host is reachable and trusted before deploying.
  2. Verify resolution and TLS — Confirm the environment URL resolves to the server and serves a trusted TLS chain before the release lands.

Background

Section titled “Background”

The environment URL and certificate were set up in Phase 4. This is the confirmation gate: get the selected non-production URL resolving and the padlock green before the release lands, so the deploy doesn’t fail on an unresolved or untrusted host.

Steps

Section titled “Steps”

1. Create / confirm the environment URL

Section titled “1. Create / confirm the environment URL”

The DNS record and certificate are account-level actions — create them in your panel so the selected non-production host is reachable and trusted before deploying.

  1. Create or confirm the selected non-production URL in your DNS, pointed at the server’s IP.

    • ✅ The non-production URL from Zaj-PROJECT.md exists in DNS, pointed at the server IP.

  2. Issue or confirm the certificate (hosting panel or certbot).

    • ✅ A valid certificate covers the non-production domain.

2. Verify resolution and TLS

Section titled “2. Verify resolution and TLS”

Confirm the subdomain resolves to the server and serves a trusted TLS chain before the release lands.

  1. Check DNS resolution and the TLS chain.

    Terminal window
    dig +short nonprod.example.com        # expect the server IP
    curl -sI https://nonprod.example.com | head -1   # expect HTTP/2 + valid TLS chain
    # Expected: the server IP, then an HTTP/2 status line over a valid TLS chain
    • ✅ dig returns the server IP and curl -sI responds over a valid TLS chain.

Checklist

Section titled “Checklist”

Do not mark this step done until every box below is checked.

  • 🤖 Resolution verified — nonprod.example.com resolves to the server (dig +short).
  • 🤖 TLS verified — curl -sI returns a response over a valid TLS chain (green padlock).

First release