Convox uses LetsEncrypt to issue SSL certificates. It does this by running the cert-manager tool in your kubernetes cluster. In order to verify your domain, your DocSpring instance must be available to the public internet, and you must configure a CNAME DNS record pointing to your rack’s convox.cloud domain.

Configure DNS Record

Run convox rack to find your convox.cloud router hostname.

Create a CNAME record with your router hostname as the target. For example, in Cloudflare:

Configure Domain in convox.yml and deploy changes

• Go to the docspring_enterprise directory, and open the convox.yml file in your text editor.
• Change the “# domain: docspring.example.com” line to: domain: <YOUR DOMAIN>(remove the “#” from the beginning to uncomment the line.)

Then run the following commands:

convox env set DOMAIN_NAME=<YOUR DOMAIN>
./update.sh

Once the change has been deployed, you should be able to access your DocSpring installation at your custom domain.

If you experience any problems, you may need to wait up to 24 hours for your DNS record to propagate so that LetsEncrypt can verify your domain. (Although it will usually only take around 15-20 minutes.)

Debugging kubernetes and cert-manager issues can be very challenging, so please feel free to contact us if you get stuck or have any questions. We can also help you configure cert-manager to use the DNS resolver with a Cloudflare API key.