Your own web address
By default your workspace lives at a Tobren address that includes your workspace
name, like acme-aerial.operations.tobren.io. That link always works and needs no
setup.
If you’d rather send crew and clients somewhere on your own domain — ops.acme.com,
say — you can point one at your workspace instead. Both keep working; the custom
domain is an addition, not a replacement.
Only the org owner can set this up. Admins can’t, because it changes where your whole organization is reached.
What you’ll need
Section titled “What you’ll need”- A domain you control, and access to wherever its DNS is managed (your registrar, Cloudflare, Route 53 — wherever you’d normally add records).
- About ten minutes, plus waiting time that is out of everyone’s hands. See How long it takes below.
Setting it up
Section titled “Setting it up”Go to Settings → Custom domain, enter the address you want to use, and click Add
domain. Use a subdomain: a root domain (acme.com) is refused because it can’t take a
CNAME, and a domain already registered to another workspace is refused.
Tobren then shows you three DNS records to add. Add all three in one sitting — they’re shown together on purpose, so you only make one trip to your DNS provider:
| Record | What it does |
|---|---|
| TXT | Proves you control the domain. |
| CNAME (your domain) | Points visitors at Tobren’s servers. |
CNAME (_acme-challenge.…) |
Lets Tobren issue the HTTPS certificate. |
Copy the exact name and value shown for each — Tobren generates them for your domain specifically, so records from a guide or another provider’s example will not verify.
Then come back and press Verify DNS.
What the status means
Section titled “What the status means”The badge next to your domain tells you where you are:
| Status | Meaning |
|---|---|
| Pending verification | Records added but not yet seen. Press Verify DNS once DNS has propagated. |
| Verified | Ownership confirmed. The certificate is next. |
| Provisioning TLS certificate | Your domain is confirmed and HTTPS is being issued. Nothing more to do. |
| Active — TLS live | Finished. The domain serves your workspace over HTTPS. |
| Verification failed | The records weren’t found or didn’t match. See below. |
The ownership records stay required until you’re Verified; the certificate record stays required until you’re Active. Tobren stops showing a record once it is no longer needed, so the instructions shrink as you progress — an empty instructions block means you’re done.
How long it takes
Section titled “How long it takes”DNS propagation is the slow part, and none of it is Tobren waiting. A TXT record can take up to 48 hours to become visible, though most providers are far quicker — often minutes. Certificate issuing after verification usually takes a few minutes more.
Press Verify DNS whenever you like; checking early costs nothing and simply reports that the record isn’t visible yet.
If verification fails
Section titled “If verification fails”Nearly always one of these:
- The records haven’t propagated yet. The most common cause by a wide margin. Wait and press Verify DNS again.
- A record was added to the wrong name. Many DNS providers append your domain
automatically, so pasting the full name can produce
ops.acme.com.acme.com. Check what your provider actually saved. - A value was truncated or re-wrapped on paste. Copy each value again and compare the whole string, not just the start.
- The domain already points somewhere else. An existing CNAME or A record on the same name will win. Remove or replace it.
Removing a custom domain
Section titled “Removing a custom domain”Press Remove, then Confirm removal, in the same place. The custom address stops working immediately and shows “Domain not configured”. Your workspace stays reachable at its Tobren address, and nothing in it is affected. If you are signed in on the custom domain, you are signed out and sent to your Tobren address. Delete the DNS records at your provider afterwards.
While the certificate is being issued, Check certificate status re-checks it. If the ownership record later disappears from DNS, the status reads Stopped resolving.