The domain troubleshooting guide can help with most custom domain configuration issues. You might be able to use that guide to solve it before a human is available to help you. Then you can come back here and share the answer for bonus points.
You can also use v0 to narrow down the possibilities.
If I execute vercel alias rm myapp-git-main-myapp.vercel.app -y | vercel alias rm myapp-myapp.vercel.app -y the problem it’s gone, but I think that it’s not the solution. WDYT?
You can remove the myapp.vercel.app domain in project settings to eliminate that from being aliased to new deployments. But the Git generated URL and the unique deployment URL are aliased automatically. If you prefer not to use them, you can ignore them. They are not accessible to anyone else unless you disable Deployment Protection.
And when I try to access (from a different device where I don’t have the Vercel Account) to myapp-git-main-myapp.vercel.app and myapp-myapp.vercel.app they are accessible.
Also, I’m using Cloudflare as Reverse Proxy, that’s why I don’t want to expose the other urls.
Hi @suituxr, as Amy pointed out earlier you can remove the project level domain *.vercel.app from the Domains section in the project settings. But, Vercel will still assign unique URLs to your deployments.
The Vercel Authentication only applies to deployment specific URLs and not to any production level domain. See the image below:
If you try and access a deployment URL (example from the above project), you will be redirected to Vercel login page.
That being said, if you don’t expose these Vercel URLs, you won’t receive traffic there. These URLs do not interfere with your Cloudflare proxy settings, so you can continue using that with the production deployments.
TL;DR: There is no real downside to these auto-generated URLs, as long as your website is secure.
Yes, I’ve removed myapp.vercel.app and it’s fine, but the problem its that when a push it’s made to the main branch, it creates the myapp-git-main-myapp.vercel.app and myapp-myapp.vercel.app domains and they are accesible with the Deployment Protection enabled.
As you can see in the domains of the production deployment overview:
Those domains that Vercel creates, are accessible from unauthenticated.
I have the deployment protection enabled as you can see:
Hi @suituxr, thanks for adding more information but as we stated above these auto-generated domains can not be deleted forever, they will reappear when you deploy a new version.
Only the production deployment URLs is accessible without authentication. The URL in your screenshot is from the main branch, which would be pointing to the production deployment.
There is no risk of exposing them and you can ignore them safely.
The auto-generated domains are not going throught the Cloudflare Proxy, so if there is any DDOS or something, it will be Vercel with his Firewall that catches them, not Cloudflare.
Also, I don’t want anybody to access to the Production environment without using Cloudflare as Reverse Proxy.
There is no solution to avoid auto-generating this domains?
I’ll do a trigger that executes “vercel alias rm myapp-git-main-myapp.vercel.app -y | vercel alias rm myapp-myapp.vercel.app -y” when a production environment it’s deployed.
Also, it would be a great feature to disable the automatic domain creation.