One decision in this process: *.wikimedia.org is not an option.
The Wikimedia Site Reliability Engineering team prefers not to use this domain for any new service (MediaWiki or not) that is not directly under their supervision. For 3rd party services especially, the use of any other domain is usually a better option, or the only one.
So… what next? 