Default service URLs
Every web service and static site receives a default hostname:{serviceId}.breachfix.com (for example srv-abc123.breachfix.com).
Why breachfix.com?
Cloudflare Universal SSL covers *.breachfix.com on the free plan. Second-level names like srv-xxx.cloud.breachfix.com require a paid Advanced Certificate. Service URLs therefore use one label under breachfix.com.
TLS
Platform TLS terminates at Cloudflare for default URLs. The gateway proxies to your container over the private Docker network. See TLS certificates.
Control plane URL
The dashboard and API live at cloud.breachfix.com (or your self-hosted BREACHFIX_CLOUD_PUBLIC_URL). Injected as BREACHFIX_CLOUD_PUBLIC_URL into customer containers.
Operators: Hostnames & routing.