25 days ago
Custom domain app.epspe.co.za has been stuck on "Waiting for DNS update" for several hours and no TLS certificate has been issued.
Project: eps-bespoke-bathrooms · Service: eps-bespoke-bathrooms · Environment: production
Both required DNS records are in place and globally propagated:
CNAME app.epspe.co.za → 4qbgh1sk.up.railway.app — unproxied (DNS-only), resolves to 69.46.46.98. Your dashboard already shows this record with a green check.
TXT _railway-verify.app.epspe.co.za → railway-verify=c857612919125e8852e2ce35bc331c58b0f494ea1f42d2f1e58d05ddda5d13df — exact match to the value your "Configure DNS Records" dialog specifies. Your dashboard still shows ⚠ against this row.
The TXT record is confirmed identical from 8.8.8.8, 1.1.1.1, 9.9.9.9, 208.67.222.222 and from the authoritative nameservers (ernest.ns.cloudflare.com / becky.ns.cloudflare.com). There are no CAA records on the zone, and no conflicting A/AAAA records on the subdomain.
Since Railway has already verified the CNAME from this same zone, it is clearly able to read our DNS — it just isn't accepting the TXT. https://app.epspe.co.za currently serves the default *.up.railway.app certificate, so the domain is unusable.
Please re-trigger verification / certificate issuance for this domain. Note our DNS is managed by a third party, so if removing and re-adding the domain would regenerate the verification token, please tell me first — I'd need to arrange the replacement TXT before doing that.
1 Replies
Status changed to Awaiting Railway Response Railway • 25 days ago
25 days ago
Your DNS is correct, and your checks match what we see. The CNAME is propagated and the TXT value at _railway-verify.app.epspe.co.za matches the expected token exactly.
To answer your question first: removing and re-adding will not regenerate the verification token. It's derived from the domain and the project, so re-adding app.epspe.co.za to the same project keeps the TXT record you already have. You don't need to arrange anything with your DNS provider, and you should leave that record exactly as it is.
The problem is that the ownership check didn't pick up your TXT record and doesn't retry indefinitely, so it needs restarting, and removing and re-adding the domain will help with that. Could you please:
- Remove app.epspe.co.za from the eps-bespoke-bathrooms service.
- Re-add it to the same service, with the target port set to 8080.
- Leave both DNS records as they are.
Verification should clear shortly after and the certificate will follow. One thing to expect: re-adding assigns a new CNAME target, so the dashboard may flag that row while your record still points at the old one. It won't block the certificate or future renewals, so you can update it whenever fits your provider's process.
Sorry for the time this cost you. Reply here once you've re-added it and I'll confirm it verified from our side.
Status changed to Awaiting User Response Railway • 25 days ago
18 days ago
This thread has been marked as solved automatically due to a lack of recent activity. Please re-open this thread or create a new one if you require further assistance. Thank you!
Status changed to Solved Railway • 18 days ago