<![CDATA[my base domain has a self-sign cert by cloudron]]>Hi there,
I am new in Matrix so hopefully the question is not weird.
I have matrix.domain.tld running as an app domain with Synapse (LE certificate working correctly), but the apex domain domain.tld, which only serves .well-known/matrix/server, keeps getting the self-signed fallback certificate instead of Let's Encrypt. cloudflare is API is OK and LE prod is also set. well-known seems to be ok as well. What needs to be done in addition? any idea how to trigger a LE for the domain.tld?
2nd.
federation tester uses 8443 any possibilty to switch to 443 for the cloudron.io installation?

thx for your feedback in advance
Joerg

]]>https://forum.cloudron.io/topic/15858/my-base-domain-has-a-self-sign-cert-by-cloudronRSS for NodeTue, 08 Sep 2026 12:05:21 GMTSun, 23 Aug 2026 20:08:01 GMT60<![CDATA[Reply to my base domain has a self-sign cert by cloudron on Mon, 24 Aug 2026 11:12:19 GMT]]>Cloudron by default does not fully setup the root domain unless an app is installed there. Since the well-known has to be served up on the root domain, it only gets valid certs if you install any app there. The well-known dialog should show some info about this, but it is probably easy to overlook.

So to fix this in your case, just install an app at domain.com even if only used as a placeholder.

]]>https://forum.cloudron.io/post/128487https://forum.cloudron.io/post/128487Mon, 24 Aug 2026 11:12:19 GMT