How do I get my apex domain working with Azure. http://www and https://www work fine.

Question

I've pointed the domain to azure from network solutions as instructed.
I have created a dns zone for gematrix.com.
I've added * and www for cname record.

apex gematrix.com still coming up gematrix.com’s server IP address could not be found.

Answer 1

Hello @Tom@gematrix ,

You can use alias records to point your DNS zone apex to Azure CDN endpoints. This is useful when you create static websites using Azure storage and Azure CDN. You can then access the website without prepending "www" to your DNS name.

CNAME records aren't supported at the zone apex. So, you can’t use a CNAME record to point your apex domain to your CDN endpoint. Instead, you can use an alias record to point the zone apex to a CDN endpoint directly.

Please refer: https://learn.microsoft.com/en-us/azure/dns/dns-alias#point-zone-apex-to-azure-cdn-endpoints
https://learn.microsoft.com/en-us/azure/dns/tutorial-alias-tm

Also, if you require HTTPS access for your web content, then after mapping your Azure CDN content to a custom domain, you have to enable HTTPS on your Azure CDN custom domain.

Please refer : https://learn.microsoft.com/en-us/azure/storage/blobs/storage-custom-domain-name?tabs=azure-portal#map-a-custom-domain-with-https-enabled

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Answer 2

Hi Tomgematrix-9953, Azure doesn't allow you to use the auto-configure SSL feature with apex domains, but if you obtain an SSL certificate yourself, you can use it through Azure with an apex domain.

I've just done this for myself by following this tutorial:
https://dev.to/ope/securing-your-azure-web-app-with-let-s-encrypt-4g99

The steps involved can be automated for automatic renewal of the certificate so you don't have to worry about it in future. I haven't done this for myself yet so I can't help you there.