Domain Management

Every domain.
Fully managed.

DNS records, SSL certificates, vhost configuration, provisioning, and monitoring — HostAtlas manages the entire domain lifecycle from a single interface. No more jumping between registrar dashboards, SSH terminals, and certificate tools.

Start free — no credit card See how it works

3

DNS providers

15m

DNS snapshot interval

8

Global resolvers

12

DNS record types

Provisioning Wizard

From zero to live in one workflow.

The provisioning wizard automates every step of deploying a new domain on your server. Document root, vhost configuration, SSL certificate, log rotation — all configured in sequence with live progress tracking. No SSH required.

1

Document Root

Creates the document root directory with correct ownership and permissions. Supports custom paths or follows your team's naming convention automatically.

2

Vhost Configuration

Generates the virtual host config from your selected template. Nginx, Apache, or Caddy — the wizard writes the config, enables the site, and validates the syntax before reloading.

3

SSL Certificate

Provisions a Let's Encrypt certificate via certbot. Handles HTTP-01 challenges, installs the certificate, and configures the redirect from HTTP to HTTPS automatically.

4

Log Rotation

Sets up logrotate configuration for the domain's access and error logs. Configurable rotation interval, retention period, and compression. Prevents disk fill from runaway logs.

Provisioning: example.com

In Progress
check_circle

Document root created

/var/www/example.com/public

0.4s
check_circle

Vhost config written

nginx · template: default-php

1.2s

Issuing SSL certificate...

Let's Encrypt · HTTP-01 challenge

12s
radio_button_unchecked

Configure log rotation

Waiting

Step 3 of 4 · 62% complete

Vhost Templates

Consistent configs. Every time.

Define reusable virtual host templates for Nginx, Apache, and Caddy. Each template stores the complete server block configuration and can be set as the default for new provisioning runs. No more copy-pasting configs between servers.

check_circle

Multi-server Support

Nginx, Apache, and Caddy templates in one library. The provisioning wizard automatically selects the right template based on the server's detected web server.

check_circle

Default Selection

Mark any template as the default for its server type. New domains provisioned on Nginx servers automatically use your Nginx default — zero clicks required.

check_circle

Variable Substitution

Templates support variables like {{domain}}, {{document_root}}, and {{php_version}}. HostAtlas substitutes values during provisioning.

check_circle

Team-wide Library

Templates are shared across the team. Admins maintain the library, members pick from approved templates during provisioning. Enforces consistency without blocking anyone.

description

Vhost Template Library

Nx

Default PHP 8.3

Default

Nginx · PHP-FPM 8.3 · Last edited 2d ago

more_vert
Nx

Laravel Optimized

Nginx · PHP-FPM 8.3 · Last edited 1w ago

more_vert
Ap

Apache WordPress

Apache · mod_php 8.2 · Last edited 3w ago

more_vert
Cd

Caddy Reverse Proxy

Caddy · Proxy pass · Last edited 1mo ago

more_vert

DNS Record Management

Manage DNS without leaving HostAtlas.

Connect your DNS provider and manage all record types directly from the HostAtlas dashboard. Add, edit, and delete A, AAAA, CNAME, MX, TXT, SRV, CAA, and more. Changes propagate through your provider's API instantly.

CF

Cloudflare

Full API integration for zone management. Create, update, and delete any record type. Proxy status toggle included. Supports API tokens with scoped permissions.

IX

INWX

Manage INWX-hosted zones directly from HostAtlas. Full CRUD support for all record types via the INWX XML-RPC API. Two-factor authentication supported.

NC

Namecheap

Connect your Namecheap account and manage DNS records without switching dashboards. Supports A, AAAA, CNAME, MX, TXT, and URL redirect records via the Namecheap API.

DNS Records

example.com
Type Name Value TTL Proxy
A @ 159.69.42.17 Auto
AAAA @ 2a01:4f8:c17:1a2::1 Auto
CNAME www example.com 3600
MX @ mx1.example.com (10) 3600 —
TXT @ v=spf1 include:_spf.google.com ~all 3600 —

DNS Deep Intelligence

Understand your DNS posture. Completely.

DNS Deep Intelligence runs a comprehensive analysis of every DNS record type for your domain. SOA configuration, nameserver delegation, mail exchange routing, email authentication (SPF, DKIM, DMARC), certificate authority authorization, and DNSSEC validation — all in one report.

check_circle

SOA & NS Analysis

Validates SOA serial numbers, refresh/retry/expire timers, and checks all authoritative nameservers for consistency and response times.

check_circle

Email Authentication Stack

Parses and validates MX records, SPF policies, DKIM selectors, and DMARC policies. Highlights misconfigurations that could cause email delivery failures or spoofing vulnerability.

check_circle

CAA & DNSSEC

Checks CAA records to verify which certificate authorities are authorized to issue certificates. Validates DNSSEC chain of trust from root to zone.

DNS Deep Intelligence

Scanned 14s ago

example.com · 12 record types analyzed

check_circle

SOA Record

Serial: 2025040301 · Refresh: 3600 · Retry: 600

check_circle

NS Records

2 nameservers · All responding · Consistent

check_circle

MX Records

2 mail servers · Priority 10, 20 · Reachable

check_circle

SPF

v=spf1 · 3 includes · ~all (softfail)

warning

DKIM

Selector "default" not found · Check DNS propagation

check_circle

DMARC

v=DMARC1 · p=quarantine · rua configured

cancel

DNSSEC

Not enabled · Zone is unsigned

DNS Propagation Checker

Check propagation across 8 global resolvers.

After changing DNS records, verify propagation instantly. HostAtlas queries 8 major public resolvers worldwide and compares their responses to your expected value. See which resolvers have picked up the change and which are still serving stale data.

Propagation Check: example.com A

Expected: 159.69.42.17

7/8 Propagated
check_circle

Google

8.8.8.8

159.69.42.17

12ms
check_circle

Cloudflare

1.1.1.1

159.69.42.17

8ms
check_circle

Quad9

9.9.9.9

159.69.42.17

18ms
check_circle

OpenDNS

208.67.222.222

159.69.42.17

24ms
warning

Comodo

8.26.56.26

95.217.118.41 (stale)

42ms

DNS Monitoring

Snapshots every 15 minutes. Changes detected instantly.

HostAtlas takes a full DNS snapshot of every monitored domain every 15 minutes. When records change, the platform detects the difference, assigns a severity level (info, warning, critical), and notifies your team. Catch unauthorized DNS changes, hijacking attempts, and configuration drift before they cause problems.

check_circle

Change Detection

Compares current snapshot against the previous one. Any added, removed, or modified records are flagged and categorized by type and potential impact.

check_circle

Severity Classification

TTL changes are informational. MX or NS changes get a warning. A/AAAA record changes pointing to unknown IPs are flagged as critical. Severity drives notification routing.

check_circle

Snapshot History

Browse the full history of DNS snapshots for any domain. Compare any two snapshots side by side to see exactly what changed and when.

DNS Change Detected

Warning

example.com · 3 minutes ago

Changed Record

- OLD MX 10 mx1.old-provider.com
+ NEW MX 10 mx1.new-provider.com

Added Record

+ NEW TXT "v=spf1 include:new-provider.com ~all"

Snapshot #1,247 vs #1,246

SSL Certificate Monitoring

Never let a certificate expire silently.

HostAtlas continuously monitors SSL certificates for every discovered domain. Expiration warnings, chain validation, issuer tracking, and CDN detection — all automated. Know about certificate issues days or weeks before they affect your users.

schedule

Expiration Alerts

Automatic warnings at 30, 14, 7, and 1 day(s) before expiration. Configurable thresholds per domain. Never miss a renewal deadline again.

link

Chain Validation

Validates the full certificate chain from leaf to root. Detects missing intermediates, expired chain certificates, and self-signed certificates that browsers will reject.

cloud

CDN Detection

Detects when a domain is served through Cloudflare, Fastly, or another CDN. Shows both the edge certificate (CDN) and the origin certificate so you know which one needs renewal.

badge

Issuer Tracking

Tracks which certificate authority issued each certificate. Get notified when the issuer changes unexpectedly — a potential indicator of a man-in-the-middle attack or unauthorized re-issuance.

Certificate Overview

verified_user

example.com

Let's Encrypt · RSA 2048

87 days

Expires Jul 1, 2026

verified_user

api.example.com

Let's Encrypt · ECDSA P-256

12 days

Expires Apr 15, 2026

verified_user

cdn.example.com

CDN

Cloudflare · ECDSA P-256

364 days

Managed by Cloudflare

Vhost Config Editor

Edit server configs. Without SSH.

The inline vhost config editor lets you modify Nginx, Apache, or Caddy configurations directly from the HostAtlas dashboard. Syntax validation catches errors before they hit production. Every edit creates an automatic backup with one-click rollback.

check_circle

Inline Editing

Edit the full vhost configuration file directly in your browser. Syntax highlighting for Nginx, Apache, and Caddy configs makes it easy to read and modify complex server blocks.

check_circle

Syntax Validation

Before applying changes, HostAtlas runs nginx -t or apachectl configtest on the server. Invalid configs are rejected with the exact error message displayed inline.

check_circle

Auto-backup & Rollback

Every edit creates a timestamped backup of the previous config. If a change causes problems, roll back to any previous version with one click. Full version history is preserved.

check_circle

Safe Reload

After validation passes, HostAtlas performs a graceful reload of the web server. Active connections are preserved. Zero downtime configuration changes.

/etc/nginx/sites-available/example.com
1server {
2    listen 443 ssl http2;
3    server_name example.com;
4
5    root /var/www/example.com/public;
6    index index.php index.html;
7
8    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
9    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
10
11    location / {
12        try_files $uri $uri/ /index.php?$query_string;
13    }
14}
check_circle Syntax valid · nginx -t passed Last backup: 2 hours ago

Password Protection

HTTP Basic Auth. One click.

Protect any domain with HTTP Basic Authentication directly from the HostAtlas dashboard. Set a username and password, and HostAtlas configures the web server to require credentials before serving any content. Ideal for staging sites, development environments, and client previews.

lock

Enable/Disable Toggle

Turn password protection on or off with a single click. HostAtlas adds the auth directives to your vhost config and generates the htpasswd file. Disable it when you're ready to go public.

key

Credential Management

Set the username and password from the dashboard. Passwords are bcrypt-hashed before being written to the server. Update credentials without SSH access or manual file editing.

web

Web Server Support

Works with Nginx and Apache. HostAtlas detects the web server type and writes the appropriate auth configuration. Caddy support uses the basicauth directive.

Cost Tracking

Know what every domain costs.

Track the annual registration and renewal cost of every domain in your portfolio. See total spend across your infrastructure, spot domains that are costing more than they should, and never be surprised by a renewal invoice again.

check_circle

Per-domain Cost Entry

Record the annual cost for each domain. Supports multiple currencies. Costs are displayed on the domain detail page and aggregated in the team dashboard.

check_circle

Portfolio Overview

See total annual domain spend at a glance. Filter by registrar, TLD, or server. Identify cost optimization opportunities across your entire domain portfolio.

check_circle

Renewal Reminders

Set renewal dates and get notified before they're due. Never auto-renew a domain you intended to let expire, and never lose a domain you meant to keep.

Domain Cost Overview

12 domains

Total Annual Spend

$487.40

Avg $40.62 / domain

example.com

Namecheap · Renews Dec 2026

$12.98

example.io

Cloudflare · Renews Mar 2027

$39.00

example.dev

INWX · Renews Aug 2026

$16.00

Take control of every domain.

DNS, SSL, vhost configs, provisioning, monitoring, and cost tracking — all from one platform. No more juggling registrar dashboards and SSH terminals.

Start free Talk to sales
$ curl -sSL https://install.hostatlas.app/install.sh | sudo bash -s -- --key=SERVER_KEY_