Domain Setup

Connect a domain, configure app platforms, and verify association files.

Adding a domain

Navigate to Domains in the control plane and add your hostname. LocusVia provisions TLS automatically for managed subdomains. For custom domains, add the DNS record shown in the dashboard and wait for verification.

A verified custom domain belongs to exactly one Tenant and one Environment. You cannot share a domain across environments.

Attaching app platforms

After adding a domain, attach the App Platforms that should appear in its association files:

iOS: Team ID + Bundle ID + path scopes (e.g., /home, /offers/*)
Android: Package name + SHA-256 Play App Signing fingerprints

Association files are generated from enabled App Platforms explicitly attached to the domain, independent of active Links.

Association file endpoints

text

GET https://go.yourapp.com/.well-known/apple-app-site-association
  -> 200 application/json
  -> No .json extension, no redirects, HTTPS only

GET https://go.yourapp.com/.well-known/assetlinks.json
  -> 200 application/json
  -> Uses namespace: "android_app"

Both endpoints return cache-control headers that allow revalidation. Apple and Android also cache association files outside Cloudflare — plan updates accordingly.

Diagnostics

The domain diagnostics endpoint compares your configured App Platforms against the live association file response. It catches fingerprint drift, missing platforms, and path scope mismatches before they affect users.

Association files prove configuration. Always finish with a signed-device Universal Link and App Link test on physical hardware.

iOS verification

text

1. Confirm Associated Domains entitlement: applinks:go.yourapp.com
2. Install app fresh (AASA is fetched on install/update)
3. Open a representative Universal Link
4. Test excluded paths return web fallback
5. Allow for Apple CDN cache delay (up to 24h in production)

Android verification

bash

# Re-verify app links
adb shell pm verify-app-links --re-verify com.yourapp.android

# Check verification state
adb shell pm get-app-links com.yourapp.android

# Expected: verified for go.yourapp.com

Use the Play App Signing fingerprint, not your local upload key fingerprint. Multiple fingerprints are supported for rotation windows.