Ten-second provisioning: what happens when you add a domain

When you add a domain, TDesk runs the entire hosting chain for you — most panels just hand you a checklist. In under ten seconds it:

• deploys a full DNS zone across three authoritative nameservers;
• generates and publishes a DKIM keypair;
• wires mailboxes with SPF and DMARC;
• attaches AI spam filtering (MxGuard);
• deploys the web vhost under an isolated Linux user;
• issues a live Let's Encrypt certificate.

A pre-flight DNS check runs first, so a rate limit is never burned on a zone that isn't pointing at us yet. Every step is idempotent and retryable — provisioning is reliable, not a sequence of things that can half-finish. The result: the domain is live on HTTPS, sending authenticated mail and protected from spam, before it can receive a single message.