Domain Setup

Connect a domain, configure app platforms, and verify association files.

Adding a domain#

Navigate to Domains in the control plane and add your hostname. LocusVia provisions TLS automatically for managed subdomains. For custom domains (Enterprise plan), add the DNS record shown in the dashboard and wait for verification.

Note

A verified custom domain belongs to exactly one Tenant and one Environment. You cannot share a domain across environments.

Attaching app platforms#

After adding a domain, attach the App Platforms that should appear in its association files:

iOS — Team ID + Bundle ID + path scopes (e.g., /home, /offers/*)
Android — Package name + SHA-256 Play App Signing fingerprints

Association files are generated from enabled App Platforms explicitly attached to the domain, independent of active Links.

Association file endpoints#

text

GET https://go.yourapp.com/.well-known/apple-app-site-association
  -> 200 application/json
  -> No .json extension, no redirects, HTTPS only

GET https://go.yourapp.com/.well-known/assetlinks.json
  -> 200 application/json
  -> Uses namespace: "android_app"

Both endpoints return cache-control headers that allow revalidation. Apple and Android also cache association files outside Cloudflare — plan updates accordingly.

Diagnostics#

The domain diagnostics endpoint compares your configured App Platforms against the live association file response. It catches fingerprint drift, missing platforms, and path scope mismatches before they affect users.

Warning

Association files prove configuration. Always finish with a signed-device Universal Link and App Link test on physical hardware.

Verify on device#

Verify each platform on a signed device:

text

1. Confirm Associated Domains entitlement: applinks:go.yourapp.com
2. Install app fresh (AASA is fetched on install/update)
3. Open a representative Universal Link
4. Test excluded paths return web fallback
5. Allow for Apple CDN cache delay (up to 24h in production)