From 4338a3e89162ae951e7f9cc4f56c621d32730156 Mon Sep 17 00:00:00 2001
From: Thomas Hintz <t@thintz.com>
Date: Fri, 20 Feb 2026 08:13:06 -0800
Subject: [PATCH] Don't use root domain for instance.

---
 main.tf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/main.tf b/main.tf
index 9985379..b126232 100644
--- a/main.tf
+++ b/main.tf
@@ -104,7 +104,7 @@ resource "digitalocean_reserved_ip" "machine" {
 
 resource "cloudflare_dns_record" "root" {
   zone_id = var.cloudflare_zone_id
-  name    = "@"
+  name    = "_nassella-instance"
   content   = digitalocean_reserved_ip.machine.ip_address
   type    = "A"
   proxied = false
@@ -115,7 +115,7 @@ resource "cloudflare_dns_record" "subdomains" {
   for_each  = toset(var.subdomains)
   zone_id = var.cloudflare_zone_id
   name    = each.key
-  content   = var.domain
+  content   = "_nassella-instance.${var.domain}"
   type    = "CNAME"
   proxied = false
   ttl = 300