How to Configure Domain and Email

Choose your canonical host to avoid rework later:

• www.yourdomain.com – Recommended if you use a CDN or want maximum flexibility and cookie isolation
• yourdomain.com (apex) – Simpler if your DNS/CDN supports apex records (ALIAS/ANAME)

List the professional email addresses you will use (e.g., support@yourdomain.com, orders@yourdomain.com). If you plan to use a transactional email provider (recommended), create your account now.

In your DNS provider, create the following records:

• A record (apex): Host/Name = @ (or yourdomain.com), Value = your IPv4 address, TTL = 300
• AAAA record (IPv6, optional): Host/Name = @ (or yourdomain.com), Value = your IPv6 address
• CNAME (www): Host/Name = www, Value = yourdomain.com (do not create CNAME at apex)

Save changes and wait for DNS propagation (5–30 minutes, sometimes longer). Test with dig +short A yourdomain.com or nslookup yourdomain.com on Windows.

If you need to receive email at your domain (e.g., support@yourdomain.com), you will add MX records for your mailbox provider in Step 7.

Choose one approach:

If using a CDN (e.g., Fastly, Cloudflare): Terminate TLS at the CDN and upload/manage certificates there. After confirming site-wide HTTPS is working, consider enabling HSTS (e.g., max-age=31536000; includeSubDomains; preload) at the CDN or server.

Enable a 301 redirect to your canonical host and HTTPS in your hosting panel/CDN (often called "Force WWW/Non-WWW" and "Force HTTPS"). If editing configuration files:

server {
    listen 80;
    server_name yourdomain.com;
    return 301 https://www.yourdomain.com$request_uri;
}

# Also redirect HTTPS requests for the non-canonical host
server {
    listen 443 ssl http2;
    server_name yourdomain.com;
    ssl_certificate /path/to/fullchain.pem;
    ssl_certificate_key /path/to/privkey.pem;
    return 301 https://www.yourdomain.com$request_uri;
}

RewriteEngine On
# Redirect www to non-www
RewriteCond %{HTTP_HOST} ^www\.yourdomain\.com$ [NC]
RewriteRule ^(.*)$ https://yourdomain.com/$1 [L,R=301]
# Force HTTPS (supports proxies)
RewriteCond %{HTTPS} !=on [OR]
RewriteCond %{HTTP:X-Forwarded-Proto} !https
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [L,R=301]

In Magento Admin:

1. 1. Go to Stores › Settings › Configuration › General › Web
2. 2. In the scope switcher (upper-left), select the Website you want to configure. If you run different domains per store view, switch to Store View scope and set Base URLs there.
3. 3. Under Base URLs, set Base URL to https://yourdomain.com/ (match your canonical)
4. 4. Under Base URLs (Secure), set Base URL (Secure) to the same HTTPS URL. Enable "Use Secure URLs on Storefront" and "Use Secure URLs in Admin"
5. 5. Under URL Options, set Auto-redirect to Base URL = No (recommended when redirects handled at CDN/web server)
6. 6. Under Search Engine Optimization, set Use Web Server Rewrites = Yes (removes index.php from URLs)
7. 7. Default Cookie Settings: Go to General › Web › Default Cookie Settings
   • Cookie Domain: .yourdomain.com (for subdomain sharing) or leave blank
   • Use HTTP Only: Yes
   • Use Secure Cookies: Yes (after HTTPS works end-to-end)
8. 8. Click Save Config, then System › Tools › Cache Management › Flush Magento Cache

bin/magento setup:store-config:set --base-url="https://yourdomain.com/" \
    --base-url-secure="https://yourdomain.com/" --use-secure=1 --use-secure-admin=1
bin/magento cache:flush

bin/magento config:set web/unsecure/base_url "https://yourdomain.com/" \
    --scope=websites --scope-code=YOUR_WEBSITE_CODE
bin/magento config:set web/secure/base_url "https://yourdomain.com/" \
    --scope=websites --scope-code=YOUR_WEBSITE_CODE
bin/magento cache:flush

In Magento Admin:

1. 1. Go to Stores › Settings › Configuration › General › Store Email Addresses
2. 2. For each identity (General Contact, Sales Representative, Customer Support, Custom Emails), set:
   • Sender Name: Your brand name
   • Sender Email: Professional address (e.g., support@yourdomain.com)
3. 3. Go to General › Contacts. Set Enable Contact Us = Yes, Send Emails To = your support address, Email Sender = appropriate identity
4. 4. Click Save Config

In your DNS provider:

v=spf1 include:YOUR_EMAIL_PROVIDER include:YOUR_ESP -all

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com; \
ruf=mailto:dmarc-forensic@yourdomain.com; adkim=s; aspf=s; fo=1; pct=100

Recommended (best deliverability): Use an ESP (e.g., SendGrid, Mailgun, Amazon SES) with a Magento integration.

composer require mageplaza/module-smtp
bin/magento module:enable Mageplaza_Smtp
bin/magento setup:upgrade
bin/magento cache:flush

In Magento Admin:

1. 1. Go to Stores › Configuration › Advanced › System › Mail Sending Settings
   • Set "Disable Email Communications" = No
   • Set "Set Return Path" = Specified
   • Set "Return-Path Email" = bounce-capable address from ESP (e.g., bounce@yourdomain.com)
2. 2. Go to Stores › Configuration › Sales › Sales Emails
   • Ensure emails enabled for Orders, Invoices, Shipments, Credit Memos
   • Set Email Sender to appropriate Store Email Identity
   • Under General Settings, set Asynchronous Sending = Yes (recommended)
3. 3. Ensure Magento cron is running (emails won't send otherwise)
   • Verify cron: crontab -u <magento_user> -l
   • If not installed: bin/magento cron:install
   • Check last run times in var/log/cron.log and system.log
4. 4. Test: Place a small test order or use Contact Us form. Verify From address, brand name, and successful delivery to your inbox.

dig +short A yourdomain.com
dig +short CNAME www.yourdomain.com
dig +short TXT _dmarc.yourdomain.com

nslookup -type=A yourdomain.com
nslookup -type=CNAME www.yourdomain.com
nslookup -type=TXT _dmarc.yourdomain.com

In Magento, clear caches after any changes: System › Tools › Cache Management › Flush Magento Cache