Cloudflare advanced
Wildcard Subdomains and Automatic Cloudflare SSL for Multi-Tenant Apps
Give every tenant its own subdomain with automatic DNS and SSL — and the 526 → 404 → 403 debugging trail behind it, including an SSR fetch that quietly hairpins out through your CDN.