use a CNAME instead of bare domain