Can I set the same domain for my core api server as well as web server? Or do they have to be separate domains?
They always should be on separated domains. Both the web and the exchange API server should be available as reachable independently. Both communicate with each others based on these domains, so the functionalities could get affected if the domain setups are not correct.