Domain DNS & Subdomains Configuration
Relevant source files
The following files were used as context for generating this wiki page:
Domain DNS and Subdomains Configuration defines the networking infrastructure for the Imperial Archive ecosystem. The system manages the primary imperialarchive.ai domain and the secondary imperialarchive.com domain using Cloudflare as the DNS provider and Epik.com as the registrar.
This configuration establishes the naming hierarchy, security records, and routing rules required for project deployments and secure communications.
Domain Architecture
The project utilizes two distinct domains for operational separation. The primary domain hosts core services and subdomains, while the secondary domain handles email communications.
Domain Assignments
| Domain | ID | Purpose | Registrar |
|---|---|---|---|
imperialarchive.ai | IA-DOMAIN-MAIN | Primary repository and web presence | Epik.com |
imperialarchive.com | IA-DOMAIN-EMAIL | Dedicated email-only domain | Epik.com |
Sources: 02_REPOSITORY/domain-registry.yml:7-21, 01_GOVERNANCE/canonical-registry.yml:33-43
Resolution Flow
The following diagram illustrates how requests resolve through the configured infrastructure to specific subdomains.
DNS Record Configuration
DNS management includes standard nameservers and recommended security records to prevent spoofing and ensure delivery integrity.
Nameservers
The system uses Cloudflare nameservers for zone management. Current values are placeholders pending final propagation from the Cloudflare account.
a.ns.cloudflare.comb.ns.cloudflare.com
Sources: 02_REPOSITORY/domain-dns.yml:7-10, 02_REPOSITORY/domain-registry.yml:28-30
Security Records
The configuration prioritizes high-security posture via SPF, DMARC, and CAA records.
| Type | Value | Priority | Note |
|---|---|---|---|
| SPF | v=spf1 include:_spf.google.com ~all | HIGH | Adjust based on email provider configuration. |
| DMARC | p=none (Initial) -> p=reject (Final) | HIGH | Staged rollout for monitoring before enforcement. |
| CAA | 0 issue "letsencrypt.org" | MEDIUM | Restricts certificate issuance to Let's Encrypt. |
Sources: 02_REPOSITORY/domain-dns.yml:13-27
Subdomain Hierarchy
Subdomains are managed as labels that resolve against the apex domain imperialarchive.ai. The deployment occurs in three distinct phases.
Phase 1: Core Launch
- www: Main web interface.
- tamara: Dedicated portal for the Tamara Learning Program.
- security: Security documentation and reporting.
Phase 2: Expansion
- docs: Technical documentation and wiki.
- elias: Dedicated portal for Elias Home Room.
Phase 3: Future Services
- api: Programmatic access and integrations.
- status: System health and uptime monitoring.
Sources: 02_REPOSITORY/domain-subdomains.yml:9-16, 01_GOVERNANCE/canonical-registry.yml:25-26
SSL and Security Headers
The domain uses Cloudflare Universal SSL for encryption. Security headers are enforced to protect against common web vulnerabilities.
Sources: 02_REPOSITORY/domain-ssl.yml:7-17
Financial and Operational Management
Domain assets involve recurring annual costs for registration and monthly costs for DNS/CDN services.
Cost Breakdown
- Registry Fees: ~$45 USD annually for
.aiand.comrenewals via Epik.com. - DNS Services: $0 - $480 USD annually for Cloudflare (Free to Pro tiers).
- Owner: Latifah Almutairi holds legal ownership of all domain assets.
Sources: 02_REPOSITORY/domain-costs.yml:7-16, 02_REPOSITORY/domain-registry.yml:33-35
Status Summary
The operational status of the domain infrastructure is tracked to ensure continuity.
- Domain Registered: Yes
- DNS Delegated: Pending
- Transfer Lock: Pending
- WHOIS Status: Private