App.baroption.com Invalid Configuration & SSL Issue

[ovrion]

Hello Vercel Community,

I am experiencing a persistent “Invalid Configuration” status and a failure to provision an SSL certificate for my subdomain app.baroption.com. This domain is linked to my Vercel project (“ovrions-projects / barops” - Hobby plan).

My primary domain baroption.com is hosted on Wix, and its nameservers (ns14.wixdns.net, ns15.wixdns.net) are pointed to Wix. Therefore, Wix is the authoritative DNS provider for my domain. My email is also managed via cPanel, with MX records correctly configured in Wix DNS.

The core issue is that app.baroption.com remains “Invalid” on Vercel, and SSL is not provisioning, even though the CNAME record is correctly set and globally propagated. Vercel’s UI often suggests changing my root domain’s nameservers to Vercel’s (ns1.vercel-dns.com, ns2.vercel-dns.com), but this is not feasible as baroption.com must remain hosted on Wix.

Current Behavior:

• app.baroption.com shows “Invalid Configuration” in Vercel project settings.
• SSL certificate is not provisioned.
• The Vercel UI suggests changing nameservers for baroption.com to Vercel’s, despite app.baroption.com being a subdomain configured via CNAME.

Expected Behavior:

• app.baroption.com should show a “Ready” or valid configuration status.
• An SSL certificate should be automatically provisioned for app.baroption.com.

Detailed Configuration and Troubleshooting Steps Taken:

1. CNAME Record in Wix DNS:

   • I have added a CNAME record for app.baroption.com in my Wix DNS settings.
   • Host Name: app (Wix displays this as app.baroption.com).
   • Value/Points to: be3a29aa8c989cbb.vercel-dns-017.com (verified against Vercel’s exact requirement).

2. Global DNS Propagation Confirmed:

   • I have used multiple external DNS propagation checkers (whatsmydns.net and dnschecker.org).
   • Both tools confirm that the CNAME record for app.baroption.com is correctly propagated globally and resolves to be3a29aa8c989cbb.vercel-dns-017.com across numerous regions.

3. Vercel Domain Re-addition:

   • To force a re-check by Vercel, I have repeatedly removed app.baroption.com from my Vercel project and then re-added it (selecting “Connect to an environment” and “Production”). This did not resolve the “Invalid Configuration” status.

4. Absence of _acme-challenge Record:

   • As suggested by Vercel’s AI assistant, I thoroughly inspected all record types (A, CNAME, TXT, MX, SRV) within my Wix DNS management interface.
   • I can confirm that no existing _acme-challenge record for baroption.com or app.baroption.com is present that could be conflicting with SSL provisioning.

5. Wix DNS Limitation Regarding CAA Records (Crucial Finding):

   • Vercel’s AI assistant suggested adding a CAA record (0 issue "letsencrypt.org").
   • However, after a detailed search of my Wix DNS management interface, Wix does not provide any option to add or manage CAA records. There is no dedicated CAA record type or an “Advanced DNS Settings” section accessible in my Wix account. This prevents me from explicitly configuring CAA records via my current DNS provider.

6. /.well-known Path Redirection:

   • This check has not been performed, as it typically requires SSL to be active for proper testing.

• Project Name: “ovrions-projects / barops”
• Vercel Plan: Hobby
• Domain in question: app.baroption.com
• Main Domain Registrar: GoDaddy
• Main Domain DNS Provider: Wix (ns14.wixdns.net, ns15.wixdns.net)

Any insights or assistance from the community or Vercel staff would be greatly appreciated given these specific circumstances and limitations.

Thank you.