Domains, DNS, and TLS

Yamify assigns managed app URLs under apps.yamify.co and exposes them over HTTPS.
Production host format
<project>.<username>.apps.yamify.co
DNS model
- Root zone:
yamify.co - App subzone:
apps.yamify.co - Dynamic host records created programmatically for deployments
TLS model
- cert-manager issues certificates for app hosts
- Prefer wildcard strategy where possible to avoid per-host cert pressure
- Keep rollback path to legacy hosts during migrations