Domains

Overview

Domains maps a hostname to a local app port through Foster’s built-in reverse proxy (TLS on 443, ACME/HTTP on 80). Private keys stay on the agent; the panel stores domain metadata only.

Enabling the proxy is designed so Foster owns 80/443 for product routing. Conflicting host nginx setups may be stopped or flagged when the proxy is enabled.

Add a domain

• Add a domain and target port for the upstream on the server.
• Choose Auto SSL (Let’s Encrypt) or upload a custom certificate (PEM).
• Auto SSL does not issue immediately — the domain starts waiting for DNS.
• Custom certificates can be swapped later without restarting the proxy.

Sensitive changes (enable/disable, upsert, delete, set cert) may require 2FA step-up when enabled on your account.

Auto SSL

• Point the domain’s A/AAAA records at this server’s public IP before issuance can succeed.
• The SSL register watchdog checks pending Auto-SSL domains about every 5 minutes (or use “Check SSL now”).
• Renewals for active certificates are handled automatically (about a 10-day renewal window).

Plan limits

Your plan caps apex domains, subdomains, and whether Auto SSL is allowed. See pricing for Free / Starter / Medium / Max entitlements.

Notes

• Deleting a domain removes its route and any custom cert files stored on the agent for that domain.
• Ensure DNS is correct before expecting Auto SSL to flip to active.