When I create an app on App Platform, DO assigns it a random subdomain at “ondigitalocean.app”. I can then define a custom domain for this app too.
It would be good be able to block access via the default domain.
The use case is that we are using Cloudflare Zero Trust to protect an app, and this works fine except for the fact that the protection can be completely bypassed simply by using the default non-custom domain name.