Apex domain as custom domain not working even though my zone is a Cloudflare zone

I have the following pages which works right now:

https://ibd-guide.pages.dev/

https://ibd-guide.pages.dev/

I added the custom domain

ibd.guide

ibd.guide

which I purchased from Porkbun but use Cloudflare nameservers. It created a CNAME record for @ to point to

ibd-guide.pages.dev

ibd-guide.pages.dev

but the custom domains page says

Inactive (Error)

Inactive (Error)

and

https://ibd.guide

https://ibd.guide

can't be found.

I've tried it with the proxy enabled and disabled. My zone's SSL/TLS is set to Full (strict).

In DNS > Settings > DNSSec, it says:

Success! ibd.guide is protected with DNSSEC.

Success! ibd.guide is protected with DNSSEC.

I feel like I've done everything right. What's wrong?

Chaika•6/10/24, 4:43 PM

I added the custom domain ibd.guide which I purchased from Porkbun but use Cloudflare nameservers. It created a CNAME record for @ to point to ibd-guide.pages.dev but the custom domains page says Inactive (Error) and https://ibd.guide can't be found.

It'll make the record for you when you add the Custom Domain under the Pages Project, you don't need to do anything else

IBD Guide - Welcome

Everything you need to know about IBD

Chaika•6/10/24, 4:44 PM

that website works for me though, did the status change?

TruthlessOP•6/10/24, 4:44 PM

WHAT! so it's just my PC?!

TruthlessOP•6/10/24, 4:44 PM

Chaika•6/10/24, 4:44 PM

"can't be found" is just DNS Cache

TruthlessOP•6/10/24, 4:44 PM

well shoot.

Chaika•6/10/24, 4:44 PM

yea, you tried to visit it before the dns record was propogated and now have local/resolver cache

TruthlessOP•6/10/24, 4:46 PM

Thank you so much, Chaika. I guess this is resolved now! My next question is out of scope, but do you know? I am trying to clear DNS cache in Firefox in macOS but it's not working. I go to

about:networking#dns

about:networking#dns

and click Clear DNS Cache but nothing happens.

I open a new tab, and my domain still gets the same error

TruthlessOP•6/10/24, 4:48 PM

This is wild. I even did "forget about this site" and it's still not working

TruthlessOP•6/10/24, 4:50 PM

solved. It's NextDNS blocking it for some reason

TruthlessOP•6/10/24, 4:50 PM

Thanks a lot!

Chaika•6/10/24, 4:50 PM

because of new domain or something? weird

TruthlessOP•6/10/24, 4:51 PM

"Newly registered domain"

Chaika•6/10/24, 4:51 PM

makes sense

TruthlessOP•6/10/24, 4:51 PM

I whitelisted it, and it works locally in FF now

Chaika•6/10/24, 4:51 PM

ps. If you want www to work you'd want to either add it as another custom domain under Pages Project or redirect it

TruthlessOP•6/10/24, 4:52 PM

My idea: manually add CNAME record from www to ibd.guide. Or I could point it to ibd-guide.pages.dev. I don't know if it matters.

TTruthless My idea: manually add CNAME record from www to ibd.guide. Or I could point it to...

Chaika•6/10/24, 4:53 PM

neither will work unless you add it under the Pages Custom Domain tab

TruthlessOP•6/10/24, 4:53 PM

Ahhh interesting

Chaika•6/10/24, 4:53 PM

the Pages Custom Domain tab is basically a host header whitelist

Chaika•6/10/24, 4:53 PM

and if you add it from there, it'll add the record for you

TruthlessOP•6/10/24, 4:53 PM

Oh wow, that's odd

TruthlessOP•6/10/24, 4:59 PM

I found a forum post from Feb 23 that suggested that it will always say Inactive (error) on the apex domain, even though it actually works

TTruthless I have the following pages which works right now: `https://ibd-guide.pages.dev/`...

Hello, I’m Allie!•6/10/24, 5:06 PM

It appears to be working, but you may have cached the old DNS records

TruthlessOP•6/10/24, 5:07 PM

This has been solved now. I don't know how to mark it as solved.

TTruthless This has been solved now. I don't know how to mark it as solved.

Hello, I’m Allie!•6/10/24, 5:08 PM

Marked it for you

TruthlessOP•6/10/24, 5:08 PM

Thanks!

TTruthless I found a forum post from Feb 23 that suggested that it will always say Inactive...

Chaika•6/10/24, 5:15 PM

that cert failed to issue, that's why

Chaika•6/10/24, 5:15 PM

you can see the www has a specific www cert, but the root just has the wildcard universal

Chaika•6/10/24, 5:15 PM

it doesn't really matter though as the universal covers it anyway

TruthlessOP•6/10/24, 5:15 PM

Oh okay! I guess I won't worry about it then