From d8d4656ff54c205033738cedf6ba5c12296266ea Mon Sep 17 00:00:00 2001
From: Kevin Wang <wy721@qq.com>
Date: Thu, 30 Jul 2026 12:19:09 +0000
Subject: [PATCH] feat(gateway): allow static proxy domain from app config

---
 dstack/gateway/dstack-app/builder/entrypoint.sh | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/dstack/gateway/dstack-app/builder/entrypoint.sh b/dstack/gateway/dstack-app/builder/entrypoint.sh
index 42b1da08a..f78092c88 100755
--- a/dstack/gateway/dstack-app/builder/entrypoint.sh
+++ b/dstack/gateway/dstack-app/builder/entrypoint.sh
@@ -118,6 +118,13 @@ app_address_ns_compat = true
 workers = ${PROXY_WORKERS:-32}
 max_connections_per_app = ${MAX_CONNECTIONS_PER_APP:-0}
 inbound_pp_enabled = ${INBOUND_PP_ENABLED:-false}
+$(if [ -n "${PROXY_BASE_DOMAIN:-}" ]; then
+cat <<PROXY_TLS
+base_domain = "$PROXY_BASE_DOMAIN"
+cert_chain = "$CERTS_DIR/gateway-rpc.cert"
+cert_key = "$CERTS_DIR/gateway-rpc.key"
+PROXY_TLS
+fi)
 
 [core.proxy.timeouts]
 connect = "${TIMEOUT_CONNECT:-5s}"