# Production domain — ikon168.com

**Base domain:** `ikon168.com` (DNS at Namecheap)

| Hostname | Purpose |
|----------|---------|
| **`agent.ikon168.com`** | CS Agent — HTTPS web UI, `/health`, API (same stack as apex). |
| **`docs.ikon168.com`** | This client documentation pack (static files; `index.html` hub). |
| **`portal.ikon168.com`** | IKON168 Customer Portal preview with the embedded LiveChat widget for production-style UAT. |

**DNS:** **A records** for `@`, `agent`, `docs`, and `portal` should point to the **GCP VM public IPv4**. **Nameservers** stay at the registrar. **TCP 80** and **443** must be allowed on the cloud firewall for Let’s Encrypt.

**Edge / TLS:** Hostnames are defined in **`infra/caddy/Caddyfile`** (production uses the full multi-host file). The FastAPI app is behind Caddy; optional dashboard Basic Auth is configured on the server (`config/.env`).

**Pre-HTTPS testing:** The agent may be reachable at `http://<server-ip>:8080` for UAT only — not for production marketing.

---

See [07-DNS-and-Domain-Namecheap.md](07-DNS-and-Domain-Namecheap.md) and [08-DNS-Values-and-Security.md](08-DNS-Values-and-Security.md).