SSL/TLS certificates

Automatic HTTPS

All CupaDev deployments automatically include free SSL/TLS certificates via Let's Encrypt.

Custom Domain SSL

When you add a custom domain:

1. Add your domain in project settings
2. Update your DNS records as instructed
3. CupaDev automatically provisions an SSL certificate
4. Certificate auto-renews before expiration

Certificate Types

• Standard SSL: Free Let's Encrypt certificates (DV)
• Custom SSL: Upload your own certificate (EV/OV)
• Wildcard SSL: Secure all subdomains

Uploading Custom Certificates

cupadev certs add --cert cert.pem --key key.pem --domain example.com

Certificate Monitoring

CupaDev monitors certificate expiration and sends alerts before renewal is needed.

Best Practices

• Always use HTTPS for production
• Enable HSTS headers
• Redirect HTTP to HTTPS
• Use modern TLS versions (1.2+)