View source for Custom domains

__NOTOC__
<languages />
{{header
 |title=<translate>
<!--T:31-->
Custom domains</translate></div>
 |notes=<translate>
<!--T:32-->
Miraheze lets you use a '''custom domain'''. Instead of ''mywiki.miraheze.org'', you can use your own domain, like ''mywiki.com''.</translate>}}
<translate>
<!--T:1-->
Miraheze lets you choose a custom domain for your wiki on request. Instead of having to use ''mywiki.miraheze.org'' (a [[mw:Subdomain|subdomain]] of ''miraheze.org''), you can use your own domain (e.g. ''mywiki.com'', ''wiki.domain.com'', etc.). Read the steps below for more information.</translate>
{{#seo:|description=Miraheze lets you set up a custom domain for your wiki. Learn more here!|keywords=custom domains, miraheze custom domain|site_name=Miraheze Meta}}
<translate>
==Steps== <!--T:33-->

<!--T:34-->
Setting up a custom domain is as easy as following 4 steps:</translate>

1. <translate><!--T:35-->
'''Get a domain'''. 
*To set up a custom domain, you will need to get a domain. There are many reputable registrars such as [<tvar name=namecheap>https://www.namecheap.com Namecheap</tvar>] where you can purchase a domain. '''Don't want to pay money for a domain?''' Click [[<tvar name=domains>#Free (sub)domains</tvar>|here]] for free domain services.</translate>

2. <translate><!--T:36-->
'''Point it to Miraheze'''. 
*Once you have a domain, you'll need to point it to Miraheze. You can either point the namespace servers to Miraheze or set a CNAME record for the subdomain you want your wiki on pointing to '''<tvar name=cname>mw-lb.miraheze.org</tvar>'''.</translate>
*<translate><!--T:3-->
Pointing the '''nameservers''' to Miraheze? Set the nameservers to "<tvar name=ns1>ns1.miraheze.org</tvar>" and "<tvar name=ns2>ns2.miraheze.org</tvar>" (contact your domain registrar if you don't know how to do this).</translate>
* <translate><!--T:8-->
Pointing a '''subdomain''' to Miraheze? Add a CNAME record on the subdomain you want (e.g. "wiki."), and point it to "<tvar name=cname>mw-lb.miraheze.org</tvar>";</translate>
::{{Note}} <translate>
<!--T:27-->
If you are using Cloudflare as your DNS provider, you'll need to make sure some settings aren't set or the subdomain won't work. Click [[<tvar name=CloudFlare>#CloudFlare</tvar>|here]] to learn more.</translate>
----
;''<translate><!--T:37-->  What should I choose?</translate>''
<translate><!--T:38--> Each option has different pros and cons:</translate>
*<translate><!--T:2-->
If you do choose to point the nameservers to us, we can handle all things related to DNS without needing your intervention. However, if you choose to do this, you'll need to ask us to create new DNS records every time you need to add a new one. If you change your nameservers and have records set already (e.g. you have ''www.'' pointing to your website), you'll need to ask us to recreate them or else your subdomains will be unreachable once you change the nameservers. '''If you don't plan to make frequent changes to the DNS records or are fine with us handling it for you, choose this.'''</translate>
*<translate><!--T:39--> If you choose to simply point a subdomain to Miraheze, you'll have complete control of your DNS records, but you'll need to manually set records yourself with your DNS provider.</translate>
----
3. <translate><!--T:40-->
'''Choose who will provide an SSL certificate'''. 
* For your safety, Miraheze uses [[<tvar name=ssl>w:Transport Layer Security</tvar>|SSL/TLS]] to encrypt the connections from our servers to your browser to make sure no one intercepts your connection. For this reason, we need all custom domains to have an SSL certificate. You can either '''provide us your own SSL certificate or let us handle it completely (for free, via Let's Encrypt).'''</translate>
*<translate>
<!--T:16-->
If you choose to ''let us handle it'': We can generate an SSL certificate (using Let's Encrypt) ourselves and even renew it automatically for the subdomain you chose without needing any additional intervention from your part, your work is done!</translate>
*<translate>
<!--T:30-->
If you have chosen ''your own SSL certificate'': After you make your custom domain request, a system administrator who handles CSR requests will generate a CSR & private key (for use at our own servers), and the requested CSR will be emailed to you. You use this CSR to request your SSL certificate vendor to generate an SSL certificate with the CSR we gave you. You will need to email us the generated SSL certificate when this is done. If all of these steps are done, we will add the custom domain to your wiki, and we will notify you when this all is done.</translate>
4. <translate><!--T:41-->
'''Make the request!''' 
* Once you've done the steps above and have chosen who will provide the SSL certificate, make the request on Phabricator. In the form, all you need to do is provide your wiki's current subdomain, your desired domain, and whether or not you'll use Let's Encrypt (us handling the SSL) or if you'll provide an SSL certificate yourself.</translate>
<center>[[<translate><!--T:42--> <tvar name=phabreq>phab:maniphest/task/edit/form/14/</tvar></translate>|<span class="mw-ui-button mw-ui-progressive mw-ui-small"><translate><!--T:43--> Custom domain request form (via Phabricator)</translate></span>]]</center>

<translate><!--T:13-->
Need help with any of the steps or have a question? Ask the [[<tvar name="cn">Community noticeboard</tvar>|community noticeboard]] for help.</translate>

== <translate><!--T:17--> Free (sub)domains</translate>{{Anchor|Free (sub)domains}} ==

<translate><!--T:18-->
If you don't wish to pay for a domain of your own, there are services that offer free domains and subdomains, which you can use instead. Remember that all Miraheze wikis automatically get a free subdomain on miraheze.org.</translate>

; <translate><!--T:19-->
Free (sub)domain providers:
* [https://freedns.afraid.org <tvar name=freedns>FreeDNS</tvar>] (provides free subdomains)
* [https://www.freenom.com/en/freeandpaiddomains.html <tvar name=freenom>Freenom</tvar>] (provides free domains ending in .cf, .ga, .gq, .ml, and .tk)
</translate>

== <translate><!--T:28--> URL structure</translate> ==

<translate><!--T:29-->
Miraheze is configured not to serve pages from the domain root. For example, if your wiki is <code>example.miraheze.org</code> and its main page is called "Welcome", then the URL will not be <code><nowiki>https://example.miraheze.org/Welcome</nowiki></code> but instead <code><nowiki>https://example.miraheze.org/wiki/Welcome</nowiki></code> (note the <code>/wiki/</code> piece). Likewise, even if you use a custom domain, Miraheze will still serve pages with this URL structure. When users visit pages on the root (e.g., without the <code>/wiki/</code>), they'll be greeted by a page asking them if they meant to go to a page on the /wiki/ subdirectory and will provide them a link.
</translate>

== CloudFlare {{Anchor|CloudFlare}}==
[[File:Cloudflare dashboard 1.png|thumb|<translate><!--T:44--> CloudFlare dashboard</translate>]]
[[File:Cloudflare dashboard 2.png|thumb|<translate><!--T:45--> Domain section.</translate>]]
[[File:Cloudflare dashboard 3.png|thumb|<translate><!--T:46--> Your entry should look like this!</translate>]]

<translate><!--T:47--> CloudFlare users '''must turn off''' CloudFlare's DDoS/Origin IP protection system/workers. This is '''not negotiable'''.</translate> <translate><!--T:5--> With it enabled, Miraheze cannot process SSL certificate requests and it creates problems with our internal systems including security issues.</translate> <translate>
<!--T:48-->
Our IPs are already public, so we do not need Origin IP protection, and we have DDoS protection through our network vendor.

<!--T:49-->
Follow the steps to find out how to disable Cloudflare DDoS/Origin IP protection system (assuming you're using the [<tvar name=dash>https://dash.cloudflare.com</tvar> dash.cloudflare.com] dashboard).
</translate>

# <translate><!--T:50--> Go to <tvar name=dash>dash.cloudflare.com</tvar></translate>
# <translate><!--T:51--> Click your domain in the dashboard.</translate>
# <translate><!--T:52--> Go to "DNS".</translate>
# <translate>
<!--T:53-->
Add <tvar name=cname><code>CNAME</code></tvar> entry to <tvar name=mwlb><code>mw-lb.miraheze.org</code></tvar>. '''The cloud with an arrow must be grey'''. If it is yellow, click it to make it grey. 

<!--T:56-->
# <li value="5">Click "Add Record". The result has to look like the last image.

<!--T:54-->
If you are done with this, continue back on the steps above.

<!--T:55-->
{{note}} Not following the rules above may result in your custom domain being removed immediately and further action being taken if necessary. In case of any doubt, feel free to contact us at sre{{@}}miraheze.org or ask on the Phabricator task you create.
</translate>

== <translate><!--T:20--> SSL Certificate Authority</translate> ==
<translate><!--T:21--> Miraheze accepts most SSL certificate authority that are accepted by browsers such as Mozilla Firefox. However, we do not accept WoSign certs anymore.</translate>

=== <translate><!--T:22--> Current authority used by Miraheze custom domains</translate> ===
<translate><!--T:23--> Below is a list of the current SSL certificate authority used by custom domains. This does not mean that others not in this list are not accepted.</translate>

* '''Let's Encrypt''' - <translate><!--T:24--> managed by Miraheze, all steps regarding Let's Encrypt (except setting nameservers) are done by Miraheze Sysadmins</translate>
* [[#CloudFlare|'''CloudFlare''']] <translate><!--T:25--> (Note: Additional restrictions apply. See section above for details.)</translate>
* '''Comodo'''
* '''Gandi'''
* '''GeoTrust'''
* '''GlobalSign'''
* '''GoDaddy'''
* '''RapidSSL'''

[[Category:Documentation{{Translation}}]]