Add free domain DNS onboarding hints

docs/daemon-management.md

@@ -39,6 +39,7 @@ config artifacts.
 ```sh
 python3 -m ampg --config gateway.toml deploy plan --profile mobile-i2p
 python3 -m ampg --config gateway.toml dns plan --profile vps-full
+python3 -m ampg --config gateway.toml dns plan --profile vps-full --free-domain-hints
 python3 -m ampg --config gateway.toml dns plan --profile vps-full --mode dynamic --behind-router
 python3 -m ampg --config gateway.toml dns check --profile vps-full
 python3 -m ampg --config gateway.toml status
@@ -68,7 +69,9 @@ to run and does not change files or services.
 and `www` records. Dynamic mode supports a Dynamic DNS hostname and warns when apex
 records require provider-specific ALIAS/ANAME or API-updated A/AAAA support. With
 `--behind-router`, it also lists port forwarding, IPv6, explicit router mapping,
-reverse-tunnel, and DNS-01 certificate options.
+reverse-tunnel, and DNS-01 certificate options. With `--free-domain-hints`, it also
+prints optional third-party community subdomain registries for operators who do not yet
+own a domain.
 
 `status` prints one row per enabled protocol with the selected platform provider,
 adapter, installed/running daemon probe, action, and policy result.

docs/domain-onboarding.md

@@ -0,0 +1,52 @@
+# Domain Onboarding
+
+> Status: draft | Updated 2026-07-06 | Applies to: clearnet DNS setup
+
+AMPG treats clearnet naming as an operator choice. A site can use a normal owned domain,
+a community free subdomain, a Dynamic DNS name, or no clearnet name at all when only
+private transports are selected.
+
+## Command
+
+```sh
+python3 -m ampg --config gateway.toml dns plan
+python3 -m ampg --config gateway.toml dns plan --free-domain-hints
+python3 -m ampg --config gateway.toml dns plan --mode dynamic --behind-router
+python3 -m ampg --config gateway.toml dns check
+```
+
+`dns plan --free-domain-hints` prints `AMPG_FREE_DOMAIN_HINT` rows for optional
+third-party services that may provide free subdomains for personal sites, hobby apps, or
+open-source projects. AMPG does not register these names automatically because each
+provider has its own review process, terms, availability, and DNS record support.
+
+## Choices
+
+Owned domain:
+: Best for production sites, long-lived projects, storefronts, and anything that needs
+  strong brand control.
+
+Free community subdomain:
+: Useful for experiments, personal projects, demos, and users who cannot buy a domain
+  yet. Review the provider's current rules before relying on it.
+
+Dynamic DNS:
+: Useful for laptops, home servers, old phones, or other hosts whose public IP can
+  change. Apex-domain support depends on the DNS provider.
+
+Behind-router hosting:
+: Use port forwarding, public IPv6, an explicit router mapping, a reverse tunnel, or
+  DNS-01 certificate validation when inbound port 80 is unavailable.
+
+## Included Hints
+
+AMPG includes conservative hints for:
+
+- `is-a.dev`: developer personal sites and projects.
+- `js.org`: JavaScript ecosystem projects; narrower content rules.
+- Open Domains: student and open-source project subdomains through the current web app.
+- Other community GitHub registries such as `is-an.app`, `wip.la`, `thedev.id`,
+  `io.day`, `jsid.dev`, `is-a.co`, `is-a-good.dev`, `is-really.cool`, and `js.cool`.
+
+These hints are naming ideas, not guarantees. Verify current status before adding a
+domain to a public deployment.

docs/wownero-integration.md

@@ -154,6 +154,7 @@ daemon_policy = "auto"
 python3 -m ampg --config gateway.toml init site wownero --domain wownero.org --source ../wownero.org-website --preset full
 python3 -m ampg --config gateway.toml deploy plan --profile vps-full
 python3 -m ampg --config gateway.toml dns plan --profile vps-full
+python3 -m ampg --config gateway.toml dns plan --profile vps-full --free-domain-hints
 python3 -m ampg --config examples/wownero.gateway.toml plan
 python3 -m ampg --config examples/wownero.gateway.toml build
 python3 -m ampg --config examples/wownero.gateway.toml manifest