for me, the simplest working solution is #2 but with existing DNS-record at your real domain. then you can even enable letsencrypt and get a cert...
@florian030 thx....worked for me2
Separate names with a comma.
