> ## Documentation Index
> Fetch the complete documentation index at: https://docs.skrmir.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Domain and TLS

> AiOS domain exposure, TLS automation, and the boundary between platform abstractions and cert-manager/ACME implementation details.

# Domain and TLS

## Audience

This page is for operators and maintainers configuring custom domains, TLS automation, and exposure policies.

## Goal and Scope

This page explains domain and TLS abstractions in AiOS.

## Core Concepts

* AppSpec only exposes `domain` and `tls`
* `tls=auto` lets the platform own certificate automation
* cert-manager is an implementation detail, not direct AppSpec configuration

## Standard Workflow

1. the application requests domain exposure and TLS
2. the control plane renders desired domain/TLS state
3. in-cluster certificate components issue and renew certificates
4. the result feeds back into deployment and domain status

## Related Pages

* [Deployment Lifecycle](/en/platform/deployment-lifecycle)
* [Logging Architecture](/en/operations/logging)
* [Application Delivery Overview](/en/platform/application-delivery)