Subdirectory Hosting (Reverse Proxy)

This guide covers the subdirectory hosting setup for GEO FAQ pages — serving them as a path on your main domain, e.g. https://www.yourcompany.com/faq/.

This is the strongest setup for SEO, but it requires a one-time configuration on your CDN or web server. If you're not sure which hosting setup to pick, start with the Hosting Overview — it compares all three options (Rose-hosted default, subdomain, subdirectory).

Why Subdirectory Hosting (Instead of Subdomain)

Setup	Example	SEO authority flows to	Setup effort
Default (Rose-hosted)	faq.userose.ai/yourcompany.com/...	faq.userose.ai (Rose)	None
Subdomain (CNAME)	faq.yourcompany.com/...	faq.yourcompany.com	DNS CNAME (5 min)
Subdirectory (proxy)	www.yourcompany.com/faq/...	www.yourcompany.com (your main domain)	Edge/CDN rule (15–60 min)

Search engines treat subdomains as separate sites. Backlinks, topical authority, and crawl budget that the FAQ content earns do not flow back to your main domain when it lives on a subdomain.

Serving the FAQ as a subdirectory of www.yourcompany.com means every link, citation, and ranking signal the FAQ accumulates directly strengthens your main domain's SEO.

Pick this option if:

• Your main domain is your primary SEO asset.
• You have access to your CDN, web server, or hosting platform configuration.
• You're willing to do a one-time technical setup (or have a developer / agency who can).

If not, the subdomain option is still a strong choice and requires only a DNS change.

How It Works

Subdirectory mode uses a reverse proxy: when a visitor (or Googlebot) requests https://www.yourcompany.com/faq/..., your CDN transparently fetches the page from Rose and returns it, without changing the URL in the browser bar.

Visitor → https://www.yourcompany.com/faq/frequently-asked-questions
            │
            ▼  (your CDN / web server)
        Reverse proxy rule:
        forward to https://faq.userose.ai/yourcompany.com/frequently-asked-questions
            │
            ▼
        Rose returns the rendered FAQ HTML
            │
            ▼
        Your CDN returns it under www.yourcompany.com/faq/...
            │
            ▼
        Visitor sees www.yourcompany.com/faq/... in the URL bar

This is not a redirect (which would change the URL and send SEO juice elsewhere). It is a transparent proxy: the response body comes from Rose, but the URL stays on your domain.

What You Need to Do

1. Pick the Subdirectory Path

The conventional choice is /faq, but anything works as long as it is a single path segment:

• https://www.yourcompany.com/faq/ ✅
• https://www.yourcompany.com/help/ ✅
• https://www.yourcompany.com/answers/ ✅
• https://www.yourcompany.com/resources/faq/ ❌ (nested paths not supported)
• https://www.yourcompany.com/ ❌ (cannot be the root — would conflict with your main site)

Make sure the path you pick is not already used by your main site.

2. Configure the Reverse Proxy

Pick the recipe that matches your stack. In every recipe, replace:

• yourcompany.com with the domain you registered in Rose (your tenant key).
• www.yourcompany.com with the public host that should serve the FAQ.
• /faq with your chosen path segment if different.

Cloudflare Worker

Best if Cloudflare already proxies your domain (orange cloud), or you can move DNS to Cloudflare.

wrangler.toml:

name = "rose-faq-proxy"
main = "src/index.ts"
compatibility_date = "2025-01-01"
routes = [
  { pattern = "www.yourcompany.com/faq", zone_name = "yourcompany.com" },
  { pattern = "www.yourcompany.com/faq/*", zone_name = "yourcompany.com" },
]

src/index.ts:

const UPSTREAM_HOST = "faq.userose.ai";
const TENANT = "yourcompany.com"; // your Rose tenant key
const PREFIX = "/faq";

export default {
  async fetch(req: Request): Promise<Response> {
    const url = new URL(req.url);
    const tail = url.pathname.slice(PREFIX.length) || "/";
    const upstream = `https://${UPSTREAM_HOST}/${TENANT}${tail}${url.search}`;

    const headers = new Headers(req.headers);
    headers.set("Host", UPSTREAM_HOST);
    headers.set("X-Forwarded-Host", url.host);
    headers.set("X-Forwarded-Proto", "https");
    headers.set("X-Rose-Public-Base", `https://${url.host}${PREFIX}`);
    headers.delete("Cookie"); // don't forward first-party cookies upstream

    const res = await fetch(upstream, {
      method: req.method,
      headers,
      body: ["GET", "HEAD"].includes(req.method) ? null : req.body,
      redirect: "manual",
    });

    // Rewrite upstream redirects back into your URL space
    if (res.status >= 300 && res.status < 400) {
      const loc = res.headers.get("Location");
      if (loc) {
        const r = new URL(loc, upstream);
        if (r.host === UPSTREAM_HOST && r.pathname.startsWith(`/${TENANT}`)) {
          const out = new Headers(res.headers);
          out.set(
            "Location",
            `https://${url.host}${PREFIX}${r.pathname.slice(TENANT.length + 1)}${r.search}`,
          );
          return new Response(res.body, { status: res.status, headers: out });
        }
      }
    }
    return res;
  },
};

Deploy: wrangler deploy.

Cloudflare Rules (no Worker)

If you'd rather not run a Worker, two Dashboard rules do the job:

Origin Rule (Rules → Origin Rules → Create rule):

• When incoming requests match: (http.host eq "www.yourcompany.com" and starts_with(http.request.uri.path, "/faq"))
• Then: Override DNS record → faq.userose.ai, Override Host header → faq.userose.ai, Override SNI → faq.userose.ai

URL Rewrite Rule (Rules → Transform Rules → Rewrite URL):

• When: same matcher as above
• Path: Rewrite to → Dynamic → concat("/yourcompany.com", substring(http.request.uri.path, 4))
• Query string: preserve

Request Header Transform Rule (Rules → Transform Rules → Modify Request Header):

• When: same matcher
• Set static: X-Rose-Public-Base: https://www.yourcompany.com/faq

Vercel / Next.js

In next.config.js:

module.exports = {
  async rewrites() {
    return [
      {
        source: "/faq",
        destination: "https://faq.userose.ai/yourcompany.com/frequently-asked-questions",
      },
      {
        source: "/faq/:path*",
        destination: "https://faq.userose.ai/yourcompany.com/:path*",
      },
    ];
  },
  async headers() {
    return [
      {
        source: "/faq/:path*",
        headers: [
          { key: "X-Rose-Public-Base", value: "https://www.yourcompany.com/faq" },
        ],
      },
    ];
  },
};

Vercel automatically forwards X-Forwarded-Host upstream.

Nginx

location = /faq {
  return 301 /faq/frequently-asked-questions;
}

location /faq/ {
  rewrite ^/faq/(.*)$ /yourcompany.com/$1 break;

  proxy_pass https://faq.userose.ai;
  proxy_set_header Host faq.userose.ai;
  proxy_set_header X-Forwarded-Host $host;
  proxy_set_header X-Forwarded-Proto https;
  proxy_set_header X-Rose-Public-Base https://$host/faq;
  proxy_set_header Cookie "";

  proxy_ssl_server_name on;
  proxy_ssl_name faq.userose.ai;

  proxy_redirect https://faq.userose.ai/yourcompany.com/ /faq/;
}

Apache (mod_proxy + mod_rewrite)

SSLProxyEngine on
ProxyPreserveHost Off

RewriteEngine On
RewriteRule ^/faq$ /faq/frequently-asked-questions [R=301,L]
RewriteRule ^/faq/(.*)$ https://faq.userose.ai/yourcompany.com/$1 [P,L]

RequestHeader unset Cookie
RequestHeader set X-Forwarded-Host "%{HTTP_HOST}s"
RequestHeader set X-Rose-Public-Base "https://www.yourcompany.com/faq"

ProxyPassReverse /faq/ https://faq.userose.ai/yourcompany.com/

AWS CloudFront

1. Create a custom origin pointing at faq.userose.ai (HTTPS only, origin path /yourcompany.com).
2. Add a cache behavior for path pattern /faq/* using the new origin.
3. Attach an origin request policy that forwards X-Forwarded-Host and X-Rose-Public-Base.
4. Attach a CloudFront Function (viewer-request event) to strip /faq from the path:

function handler(event) {
  var req = event.request;
  req.uri = req.uri.replace(/^\/faq/, '') || '/';
  req.headers['x-rose-public-base'] = { value: 'https://www.yourcompany.com/faq' };
  return req;
}

WordPress (.htaccess)

RewriteEngine On
RewriteRule ^faq$ /faq/frequently-asked-questions [R=301,L]
RewriteRule ^faq/(.*)$ https://faq.userose.ai/yourcompany.com/$1 [P,L]

Requires mod_proxy and mod_proxy_http. Most managed WordPress hosts (Kinsta, WP Engine, Pressable) disable these — in that case, put Cloudflare in front of WordPress and use the Cloudflare Worker recipe instead.

Hosted CMS (Webflow, Wix, Squarespace, Shopify, HubSpot CMS, Framer)

These platforms do not let you configure reverse proxies directly. The workaround is to put a CDN you control in front of the CMS:

1. Move DNS for www.yourcompany.com to Cloudflare (proxied, orange cloud).
2. Keep the CMS as your origin — Cloudflare forwards everything to it by default.
3. Add the Cloudflare Worker (or Rules) recipe above on the /faq* route. Cloudflare intercepts those requests before they reach the CMS.
4. The rest of your site (/, /about, /pricing) keeps flowing to the CMS as before.

Webflow-specific note: set Cloudflare SSL mode to Full (strict), and verify a few non-FAQ pages still render correctly from Webflow after the proxy switch.

3. Tell Rose Your Public Base URL

Once your proxy is live, email your Rose contact:

"Please configure https://www.yourcompany.com/faq as our GEO FAQ public base."

We will:

1. Set geo.publishing.public_base to your URL.
2. Re-render your FAQ pages with the new canonical URL baked into the HTML, <link rel="canonical">, OpenGraph tags, and JSON-LD structured data.
3. Update your sitemap.xml and robots.txt to point at the new base.
4. Configure faq.userose.ai/yourcompany.com/* to 301-redirect to your new URL, so existing links keep working and Google consolidates the index.

4. Verify It Works

URL	Expected Response
https://www.yourcompany.com/faq/frequently-asked-questions	200 OK — your FAQ page renders, URL bar stays on your domain
https://www.yourcompany.com/faq/sitemap.xml	200 OK — XML sitemap with URLs under your domain
https://www.yourcompany.com/faq/robots.txt	200 OK — allows all crawlers, sitemap pointer under your domain
https://faq.userose.ai/yourcompany.com/frequently-asked-questions	301 Moved Permanently → https://www.yourcompany.com/faq/frequently-asked-questions
View page source on the FAQ page	<link rel="canonical"> points at https://www.yourcompany.com/faq/...

5. Add to Google Search Console (Recommended)

If www.yourcompany.com is already a verified Search Console property, you don't need to do anything — Google will discover the new pages on its next crawl. Speed things up by submitting the sitemap manually:

https://www.yourcompany.com/faq/sitemap.xml

Bing / IndexNow (subdirectory mode only). Unlike the default and subdomain setups, Rose does not auto-submit to IndexNow (Bing / ChatGPT search) in subdirectory mode. IndexNow verifies ownership by fetching a key file at your domain root (https://www.yourcompany.com/{key}.txt), which your /faq/* proxy rule does not serve. Bing still discovers your pages via the sitemap, just more slowly. To submit instantly, add your domain in Bing Webmaster Tools and submit https://www.yourcompany.com/faq/sitemap.xml.

What Rose Handles for You

• Generation and hosting of the FAQ HTML, JSON-LD, sitemap, and robots.txt.
• Canonical URL, OpenGraph tags, JSON-LD @id / url — all rebuilt from your public base.
• Google sitemap kept fresh on every pipeline run (IndexNow auto-submit is not available in subdirectory mode — see the Bing note above).
• 301 redirects from the legacy faq.userose.ai/... URLs to your new ones.
• Assets (CSS, JS, fonts) served from faq.userose.ai/_assets/... with permissive CORS, so your proxy rule only needs to cover /faq/* — not asset URLs.

What to Watch Out For

Cache behavior

Your CDN will cache the proxied responses. Rose returns Cache-Control headers tuned for the GEO content (typically s-maxage=3600, stale-while-revalidate=86400). Most CDNs honor these by default. If you have an aggressive override, make sure it doesn't serve stale content for longer than 24 hours.

When Rose publishes new FAQ content, the upstream Last-Modified and ETag change — your CDN will revalidate on the next request. If you want instant updates, ask Rose to wire a cache-purge webhook into your CDN.

Asset URLs

The FAQ HTML references CSS, JS, fonts and other assets via absolute URLs on faq.userose.ai/_assets/.... Your proxy rule only needs to cover the HTML/XML/TXT endpoints under /faq/*. You don't need a separate rule for assets, and you don't need to worry about CSP — Rose sets the appropriate headers.

First-party cookies

Don't forward your site's first-party cookies upstream — Rose doesn't use them, and they add noise to logs. The recipes above strip Cookie from the proxied request.

WAF / bot rules

If your WAF blocks faq.userose.ai's IPs from making outbound requests to your /faq/... URLs, IndexNow ping-backs may fail. This is rare but if you have an aggressive WAF, allow the Rose user-agent (RoseGeoBot/1.0) on the /faq/* path.

Old subdomain URLs

If you previously used faq.userose.ai/yourcompany.com/... or faq.yourcompany.com, the 301 redirects we configure transfer link equity for ~6 months. After that, search engines fully consolidate the index on your new subdirectory.

TLS certificate

Your existing www.yourcompany.com certificate covers the new /faq/ path — there is nothing to configure or renew. Rose's own certificate on faq.userose.ai only matters for the proxy hop between your CDN and Rose, and is always valid.

Reverting

If you want to stop serving on your domain and go back to a subdomain or to faq.userose.ai:

1. Tell us — we'll clear geo.publishing.public_base and re-render with the previous canonical URL.
2. Remove the proxy rule from your CDN / web server.
3. (Optional) Submit a removal request in Google Search Console for www.yourcompany.com/faq/* to clear it from the index faster.

Existing visitors and links to www.yourcompany.com/faq/... will start returning 404 once the proxy rule is removed — plan a redirect from your CDN to the new location if you keep getting traffic there.

Comparing All Three Setups

	Rose-hosted (default)	Subdomain (CNAME)	Subdirectory (proxy)
Example URL	faq.userose.ai/yourcompany.com/...	faq.yourcompany.com/...	www.yourcompany.com/faq/...
Setup time	0 minutes	5 minutes (DNS)	15–60 minutes (CDN config)
Who does the work	Rose	You add a CNAME	You configure your CDN / server
TLS certificate	Rose	Rose (auto-provisioned)	Yours (existing)
SEO authority flows to	faq.userose.ai	faq.yourcompany.com	www.yourcompany.com
Brand consistency	Rose-branded URL	Your brand	Your brand, your main domain
Failure mode	n/a	DNS resolution	Proxy / origin error
Best for	Trial, low-touch	Most production deployments	SEO-maximizing deployments

Most clients land on the subdomain option. Pick subdirectory when your main domain has significant existing SEO authority that you want the GEO content to inherit and reinforce.