What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
If one Dokku app answers for hostnames that belong to other sites, fix the routing layers in order: inspect the app’s effective vhosts, replace its domain list with only the names it should serve, disable its vhost if it should be private, then prevent nginx’s catch-all behavior with a default server. Wildcard DNS may send many names to the machine, but nginx should reject unknown Host values instead of handing them to the first Dokku app.
Antihost offers VPS plans with one-click Docker, NVMe storage and a 14-day free trial.
What “deploying to every domain” usually means
Dokku is not normally deploying a second copy of an application for every hostname. The more common symptom is that a request for an unrelated domain is being routed to an existing app’s nginx virtualhost. Three separate decisions determine what a visitor sees:
As an Amazon Associate I earn from qualifying purchases.
Recommended Free Tools
- DNS resolution: a domain or wildcard record determines which server receives the request.
- Dokku domain registration: Dokku generates virtualhosts for the domains assigned to each app.
- nginx host matching: nginx compares the request’s HTTP
Hostheader with its configured server names and chooses a virtualhost.
A wildcard DNS record can legitimately point many names at the Dokku host. It does not, by itself, assign all of those names to one application. The dangerous fallback occurs when nginx has no matching server name and sends the request to its default site. Dokku’s nginx documentation notes that, by default, an unknown host value is routed to the lexicographically first site in the nginx configuration stack. If that first site is your app, every unrecognised hostname appears to “belong” to it.
Dokku also has a host-wide global domain. Its documentation describes this value as “used as a default TLD for all applications on a host.” That setting can create expected app hostnames, while app-specific domains add the names configured for an individual app. You must inspect both levels before changing anything.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Start with the app’s effective vhosts
Use the domains plugin report for the affected app:
dokku domains:report APPReplace APP with the Dokku app name. Review the entries labelled Domains app vhosts and Domains global vhosts. The first shows names assigned directly to the app; the second reflects host-wide domain configuration that contributes to the app’s generated hostnames.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallMake a note of every hostname that should remain public and every hostname that should not. This distinction matters because the next command replaces the complete app list rather than adding one more name. Also check whether the app is expected to be public at all. A worker, internal API, or staging service may need no nginx vhost even though it remains deployed and reachable through another internal mechanism.
Keep only the intended public names
Use domains:set for an exact allow-list
If the app should answer for one or more specific names, set the complete list in one command:
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
dokku domains:set APP example.com www.example.comThis command replaces the app’s domain list. It is not an additive operation. Any app-specific hostname omitted from the command is removed from that list, so include every name that should continue to work, such as both an apex domain and its www variant when both are intentional.
After setting the list, deploy the app again so Dokku regenerates its nginx configuration with the corrected server names. Then request each approved hostname and confirm that it reaches the expected app. Test an unrelated hostname separately; it should be handled by the host’s catch-all policy rather than by this app.
When to remove app-specific names entirely
dokku domains:clear APP removes the app-specific domains. This is useful when stale custom names should no longer be associated with the app, but it is not the same as disabling nginx for the app. A cleared list can still leave host-level domain behavior in play, depending on the global configuration and the app’s generated settings. If the app must not have a public Dokku virtualhost, use domains:disable instead.
Disable the vhost for an app that should not be public
For an internal or otherwise non-public app, run:
dokku domains:disable APPDokku’s documented behavior is that “On subsequent deploys, the nginx virtualhost will be discarded.” The change therefore becomes effective when you deploy the app again. Disabling the domain integration does not remove the app or stop its containers; it prevents Dokku from retaining the generated public nginx virtualhost on later deployments.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Use this option when the desired state is “no public Dokku route,” not merely “serve a smaller set of public names.” If the app should remain available at two known domains, use domains:set instead. If it should lose old custom names but retain whatever host-level behavior is appropriate, use domains:clear and then verify the resulting report.
Check wildcard DNS before changing nginx
Dokku’s advanced installation guidance uses a wildcard domain record pointing to the host running Dokku. That arrangement is convenient for automatically reaching app subdomains, but it also means that misspelled or entirely unknown names can resolve to the same server. DNS only gets the packet to the machine; it does not decide which app should receive the HTTP request.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Review the authoritative DNS zone for the affected domain:
- Keep a wildcard record only when you intentionally want arbitrary subdomains to reach the Dokku host.
- Remove or narrow the wildcard when only a known set of hostnames should resolve there.
- Check separate records for the apex name,
www, staging names, and any delegated subdomains. - Allow for DNS caching after a record change; an old answer can remain visible until its TTL expires.
Narrowing DNS reduces unwanted traffic, but it is not a substitute for an nginx default server. A name can still reach the host through an old cache, an alternate record, a direct hosts-file entry, or another DNS mistake. The web server should reject an unknown Host value even when the connection reaches the Dokku machine.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Add an nginx default server that rejects unknown hosts
Protect the catch-all path with a server block that is explicitly marked as the default for port 80. Create:
/etc/nginx/conf.d/00-default-vhost.confPut this configuration in the file:
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
access_log off;
return 410;
}The filename begins with 00- so it loads before /etc/nginx/conf.d/dokku.conf. The default_server flag makes this server the destination when no Dokku server name matches. server_name _; is a conventional non-matching name used for the catch-all; the decisive setting is the default listener.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsReload nginx after creating or editing the file:
service nginx reloadA request with an unknown host should now receive HTTP status 410, which means the resource is gone. Dokku’s nginx guidance also documents return 444 as an alternative. Status 444 is nginx-specific and closes the connection without sending a normal response, which can be useful when you prefer not to provide a response body to unwanted traffic. Choose one behavior and document it for anyone monitoring the server.
Do not place the default block after a broader server that has already become the default, and do not omit the IPv6 listener if the machine accepts IPv6 traffic. Otherwise, a request arriving over IPv6 can still follow a different fallback path.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Choose the control that matches the failure
| Control | Scope | Use it when | Operational result |
|---|---|---|---|
dokku domains:set APP ... |
One app | The app should serve a defined list of public names | Replaces the app’s complete domain list; redeploy to regenerate routing |
dokku domains:clear APP |
One app | App-specific custom names are obsolete | Removes app-specific domains; does not by itself express “no public vhost” |
dokku domains:disable APP |
One app | The app should not have a public Dokku route | On subsequent deploys, Dokku discards the generated nginx virtualhost |
| DNS record changes | Domain or zone | Names should not resolve to the Dokku host at all | Changes which machine receives traffic; cached answers may persist |
nginx default_server |
Entire host | Unknown hostnames must not fall through to an app | Returns 410, or closes with 444, for unmatched host values |
These controls operate at different stages. A per-app command cannot correct a wildcard record that sends unintended names to the server, and a DNS change cannot correct nginx choosing the first configured site for a host that still reaches the machine. Reliable isolation normally requires the app configuration, DNS intent, and nginx fallback policy to agree.
Account for ports and certificates after domain changes
Changing domains can affect more than the server_name values. Dokku warns that domain changes may affect port mappings, especially when an app uses non-standard ports. If the app listens through a custom external port or relies on a particular proxy mapping, review that mapping after changing or disabling domains. A name can be correctly assigned yet still fail because traffic is sent to a port where the application is not listening.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →TLS is another separate dependency. Every HTTPS name must have a certificate and nginx configuration that cover that name. Removing a name from the app’s domain list means its HTTPS route should no longer be treated as an approved endpoint; adding a name means its certificate and renewal arrangement must be checked. The exact certificate workflow depends on how TLS is configured on the host, so do not assume that changing the Dokku domain list automatically updates every certificate or external proxy.
Use this diagnostic sequence
- Identify the symptom. Record an unrelated hostname that displays the app and whether the request arrived over HTTP or HTTPS.
- Inspect Dokku. Run
dokku domains:report APPand read both the app-vhost and global-vhost fields. - Decide the intended exposure. Choose an exact public list, no public vhost, or a different host-wide design.
- Apply the app-level change. Use
domains:setfor an allow-list,domains:clearto remove custom names, ordomains:disablewhen the app should not be public. - Redeploy where required. A disabled domain is discarded on subsequent deploys, so perform that deploy before judging the result.
- Audit DNS. Remove or narrow wildcard records that are broader than your intended namespace.
- Install the catch-all. Create
00-default-vhost.confbeforedokku.conf, choose 410 or 444, and reload nginx. - Retest each path. Verify approved names, an unknown name, and any IPv6 endpoint separately.
- Review dependencies. Confirm port mappings and TLS coverage for every remaining public name.
Troubleshoot the common outcomes
An unknown name still shows the app
First confirm that nginx actually loaded the new file and that it is earlier than /etc/nginx/conf.d/dokku.conf. Then check whether the request is using IPv6, for which the configuration includes a separate listener. If the hostname is listed in the app’s report, remove it with an exact domains:set list or clear the app-specific domains as appropriate. If the name is not listed but still reaches the app, the default-server ordering is the likely issue.
The intended domain stopped working after domains:set
Because domains:set replaces the entire list, an omitted apex, www, or staging name is no longer assigned to the app. Run the command again with every approved name, redeploy, and then check the port mapping and certificate for the restored hostname.
The app is still reachable after domains:disable
The documented discard occurs on subsequent deploys. Deploy the app after disabling domains, then inspect the generated routing again. Also check for an independent reverse proxy, load balancer, or another server block that may be forwarding traffic; disabling Dokku’s generated vhost does not remove unrelated infrastructure.
Legitimate apps are receiving 410 responses
A default server should reject only names that do not match an explicit server name. Verify spelling, DNS records, and the names shown by dokku domains:report APP. If an approved name was omitted from the app’s replacement list, add it back. If the request is HTTPS, inspect the HTTPS listener and certificate configuration separately from the port-80 block shown above.
Quick Recap
Operational checklist
- Every public app has an intentional, documented hostname list.
- The global domain is understood as a default TLD, not as permission for arbitrary domains to serve an app.
- Wildcard DNS exists only where broad subdomain resolution is deliberate.
- Unknown HTTP hostnames reach a 410 or 444 catch-all, never the first Dokku site.
- The catch-all file loads before
/etc/nginx/conf.d/dokku.confand covers IPv4 and IPv6. - Apps without public routes use
domains:disablefollowed by a deployment. - Non-standard port mappings and TLS certificates are reviewed whenever names change.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
