Install
DNS proxy
The recommended install. You add three DNS records at your provider, Wrenda issues a certificate for the domain, and every request reaches Wrenda's edge before your origin.
The three records
The wizard (Domains → Add domain → DNS proxy) shows the exact name and value for each record with a copy button. The values are unique to your domain — copy them from the wizard rather than typing from this page.
| # | Type | Name | Value | Purpose |
|---|---|---|---|---|
| 1 | CNAME | your domain (@) or www | proxy.wrenda.ai | Routes traffic to Wrenda. Must be DNS only (grey cloud). |
| 2 | CNAME | _acme-challenge.your-domain | shown in the wizard | Certificate validation (DCV) and automatic renewal every 90 days. DNS only. |
| 3 | TXT | shown in the wizard | shown in the wizard | Proves you own the domain. |
Timing
DNS changes usually take effect in 5–15 minutes, but can take up to 24 hours to propagate fully. SSL validation also typically completes 5–15 minutes after the records resolve. If verification fails, wait a few minutes and try again — nothing is lost by retrying.
Cloudflare Quick Connect
When you add a domain, Wrenda detects the DNS provider from the nameservers. If the domain is in a Cloudflare account you have connected, the wizard offers Quick Connect instead of manual records. Clicking it will:
- Add the CNAME record pointing to
proxy.wrenda.ai, set to DNS only. - Activate the worker route for your domain.
- Verify the domain automatically.
You can still open Cloudflare's DNS settings from the wizard and configure the records manually if you prefer.
Verify
Add the records at your DNS provider
Provider-specific steps are below.
Click Verify DNS Records
The per-record checklist shows Found / Not found for the CNAME, the DCV CNAME and the ownership TXT, plus the SSL certificate status.
Check from the command line (optional)
bash# CNAME resolves to Wrenda dig +short CNAME your-domain.com # → proxy.wrenda.ai. # Headers show Wrenda in the path curl -I -H "User-Agent: GPTBot/1.0" "https://your-domain.com/"
All three records show Found, the certificate shows active, and the domain card shows Verified. Every response now carries an X-Correlation-ID header, and in Shadow mode an X-Wrenda-Mode: shadow header. If the certificate stays pending for more than 30 minutes, see Troubleshooting.
Per-provider instructions
Menus move around; these are the current paths as far as we know. The record contents are always the same three rows from the wizard.
Cloudflare
- Prefer Quick Connect if it is offered.
- Otherwise open Websites → your zone → DNS → Records.
- Delete any existing
A,AAAAorCNAMEfor the name you are pointing at Wrenda. - Add each record. For the two CNAMEs, click the orange cloud so it turns grey (DNS only).
- If your origin was also on this zone (orange-clouded), leave its own record alone — Wrenda fetches the origin by the URL you gave in the wizard, not by the domain.
GoDaddy
- My Products → Domains → DNS (Manage DNS).
- Delete the parked
Arecord for@if you are pointing the apex domain at Wrenda. - Add New Record for each row. Use
@for the apex,wwwfor the www host.
Namecheap
- Domain List → Manage → Advanced DNS.
- Remove the default
URL Redirect/Arecords for the host you are changing. - Add New Record: for the apex choose type ALIAS (if offered) or use
wwwwith a CNAME; Host@orwww; Valueproxy.wrenda.ai. - Add the
_acme-challengeCNAME and the TXT record with the Host set to the part of the name before your domain (Namecheap appends the domain automatically).
Amazon Route 53
- Hosted zones → your zone → Create record.
- Delete existing
A/AAAA/ Alias records for the name first. - Create the CNAME with Record name
www(or blank for the apex where allowed), Record type CNAME, Valueproxy.wrenda.ai. - Create the
_acme-challengeCNAME and the TXT record the same way. For TXT, wrap the value in double quotes.
Google Domains / Squarespace
- Google Domains moved to Squarespace. Open Domains → your domain → DNS → Custom records.
- Delete Squarespace's default records for the host you are changing.
- Add the three records. Host
www(or@if the apex CNAME is accepted), Type, Data.
Any other provider
- Find
- The DNS / Zone / Advanced DNS editor for the domain (not the registrar’s nameserver settings).
- Remove
- Existing
A,AAAAandCNAMErecords at the name you are changing. - Add
- The three records from the wizard exactly as shown. Leave TTL at the default.
- Avoid
- Proxy / acceleration toggles on the records; URL-forwarding records; adding a TXT for _acme-challenge.
- Then
- Return to the wizard and click Verify DNS Records.
www and apex
Add each hostname you want Wrenda to serve as its own domain in the dashboard (for example example.com and www.example.com), each with its own records; the wizard computes the validation names relative to the apex. If your site redirects one to the other, keep that redirect on your origin — Wrenda passes it through.