prefer the `defaultDomain` config over the `validDomains` in single-site mode