Serving multiple CRM workspaces behind one secure deployment_
Parallaxis separated DNS resolution from application health, validated the origin locally, configured WebSocket-aware reverse proxy rules, and documented the wildcard or explicit-host choices. The deployment gained a cle
- Multi-workspace CRM hosting
- Subdomain DNS diagnostics
- Nginx reverse proxy
The core CRM loaded correctly, but workspace-specific subdomains failed because public DNS, reverse proxy routing, TLS names, and application host configuration did not agree.
Parallaxis separated DNS resolution from application health, validated the origin locally, configured WebSocket-aware reverse proxy rules, and documented the wildcard or explicit-host choices.
The deployment gained a clear path for workspace routing and a diagnostic method that distinguishes DNS propagation from proxy or application failures.
Overview
The core CRM loaded correctly, but workspace-specific subdomains failed because public DNS, reverse proxy routing, TLS names, and application host configuration did not agree.
Parallaxis separated DNS resolution from application health, validated the origin locally, configured WebSocket-aware reverse proxy rules, and documented the wildcard or explicit-host choices.
The engineering decision
An NXDOMAIN response is not an application bug. We proved each layer independently—authoritative DNS, resolver view, TLS, proxy host, WebSocket upgrade, and application route.
How the system works
The implementation separates intake, validation, state changes, side effects, and reporting. That separation makes failures visible and allows one layer to change without rewriting the entire workflow.
Operational users see explicit statuses and exceptions; technical teams retain identifiers, timestamps, versions, and logs needed to reproduce a result.
Outcome
The deployment gained a clear path for workspace routing and a diagnostic method that distinguishes DNS propagation from proxy or application failures.
Project highlights
- Subdomain DNS diagnostics
- Nginx reverse proxy
- TLS host coverage
- WebSocket upgrades
- Workspace-aware routing
- Layered verification