Custom domain
Connect your own domain to OpenHost — DNS setup, propagation, troubleshooting, and best practices.
Every OpenHost site can be reached via a custom domain you own. This guide covers connecting it, DNS basics, and fixing common issues.
Before you start
- A domain registered at any registrar (Namecheap, GoDaddy, Spaceship, Cloudflare, etc.)
- Access to the domain's DNS settings
- An active OpenHost hosting plan with a site created
How DNS works (quick version)
When someone visits yourdomain.com:
- Their device asks a DNS resolver "where is this domain?"
- The resolver queries your domain's authoritative nameservers
- The nameserver returns an IP address (A record) or alias (CNAME)
- The browser connects to that IP and loads your site
Your job: point your domain's DNS at OpenHost so visitors reach your server.
Option A: Move nameservers to Cloudflare (recommended)
This gives you one dashboard for DNS, SSL, caching, and security rules.
Create a Cloudflare account
Go to cloudflare.com, sign up (free plan is fine), and add your domain.
Change nameservers at your registrar
Cloudflare gives you two nameserver addresses (e.g.
anna.ns.cloudflare.com). Log into your registrar and replace the existing nameservers with these.Add DNS records in Cloudflare
Type Name Content Proxy A @Your server IP (shown in panel) Proxied (orange cloud) CNAME wwwyourdomain.comProxied Assign domain in your panel
Control panel → Websites → your site → Domains → Add domain. Enter
yourdomain.com.Wait for propagation
Nameserver changes take up to 24 hours to propagate globally. Most complete within 1–4 hours. SSL is issued automatically once DNS resolves.
Option B: Point records only (keep current DNS)
If you want to keep your existing DNS provider:
Add an A record
At your DNS provider, add:
Type Name Value A @Your server IP (shown in panel) A or CNAME wwwSame IP, or CNAME to @Assign domain in panel
Same as above — add the domain in your control panel.
SSL
Once the domain resolves to OpenHost, an SSL certificate is issued automatically within minutes.
Subdomains
Create unlimited subdomains (e.g. blog.yourdomain.com, shop.yourdomain.com):
- Add a DNS record for the subdomain (A or CNAME pointing to your server)
- In the panel: Websites → Create website with the subdomain as hostname
- Each subdomain gets its own SSL certificate
Email records (MX, SPF, DKIM)
If you host email on OpenHost, the panel shows the correct MX/SPF/DKIM records to add.
Propagation and TTL
TTL (Time to Live) tells DNS resolvers how long to cache a record:
| TTL | Cache duration | When to use |
|---|---|---|
| 300 (5 min) | Short | During migrations — changes propagate fast |
| 3600 (1 hr) | Normal | Standard operating value |
| 86400 (24 hr) | Long | Stable records that never change |
Before a migration:
- Lower TTL to 300 at least 24 hours before the change
- Make the DNS change
- After propagation confirms, raise TTL back to 3600+
Troubleshooting
| Issue | Cause | Fix |
|---|---|---|
| Domain shows "not secure" | SSL not issued yet | Wait for DNS propagation; check domain resolves to OpenHost |
www works but root doesn't | Missing A record for @ | Add A record for root domain |
Root works but www doesn't | Missing CNAME or A for www | Add www record |
| SSL stuck on pending | DNS still points elsewhere | Verify with dig yourdomain.com A |
| "DNS_PROBE_FINISHED_NXDOMAIN" | Domain nameservers not set | Check registrar nameserver config |
| Email stopped working | MX records wiped during NS change | Re-add MX records for your email provider |
Checking DNS with dig
# Check A record
dig +short yourdomain.com A
# Check who the nameservers are
dig yourdomain.com NS
# Check from a specific resolver (bypass cache)
dig @8.8.8.8 yourdomain.com AOr use dnschecker.org to see propagation across 100+ global resolvers.
Best practices
- Don't use CNAME at the root (
@) unless your provider supports CNAME flattening (Cloudflare does) - Keep MX records when changing nameservers — email breaks if you forget
- Lower TTL before migration so old IPs don't stick for days
- Use Cloudflare proxy for DDoS protection and performance (orange cloud)
- Test from mobile data after DNS changes — it bypasses your local DNS cache