Quick start

Protect your first certificate in four steps. The Overview page in the app shows these as a checklist and keeps the setup from falling through the cracks.

1. Add a domain

Go to Domains → Add domain, enter a fully-qualified hostname (e.g. app.example.com or *.example.com for a wildcard), and choose an issuer.

2. Verify ownership

Set the DNS TXT record shown to prove you control the domain — required before any certificate is issued.

3. Install the agent (for automatic deployment)

curl -fsSL https://api.nolapse.io/install.sh | sudo bash -s -- \
  --token <enroll-token>

The agent enrolls over mTLS and waits to receive certificates to install on that machine.

4. Issue your first certificate

Press Issue — NOLAPSE requests the cert from the chosen CA, installs it via the agent, and sets up automatic renewal.