Wildcard DNS — <number>.aquila.exaflair.com (2 minutes)

Unlocks: every phone number gets a working microsite at https://<number>.aquila.exaflair.com (welcome page → Telegram OTP → workspace).

What's already done: aquila.exaflair.com (without star) points at Vercel — the site you're reading. The wildcard is a separate record pointing at our relay VPS.

Steps (Hostinger hPanel)

  1. hpanel.hostinger.com → Domains → exaflair.com → DNS / Nameservers.
  2. Add record:
    • Type: A
    • Name: *.aquila
    • Points to: 139.84.146.236
    • TTL: default (3600)
  3. Save. Do not touch the existing aquila CNAME (Vercel) — the wildcard does not cover it.

Verify (I'll do this)

dig +short test.aquila.exaflair.com     # expect: 139.84.146.236

How TLS works after this (no action needed)

The relay runs Caddy with on-demand certificates: the first visit to any new <number>.aquila.exaflair.com triggers a Let's Encrypt cert for that exact host (HTTP-01, seconds). No wildcard cert, no DNS API token, nothing to renew by hand.

What still needs to happen for the first live microsite

  1. The POC app must be reachable from the relay — that's the laptop deploy + tunnel (guide).
  2. Then: open https://919999999999.aquila.exaflair.com → welcome page → Telegram OTP.

Until the laptop is online, microsites answer 502 from the relay — the DNS record is still safe to add now.