Remove voidstash adult media stack (DNS records, tunnel routes)

servers/legion/main.tf

@@ -93,30 +93,6 @@ resource "cloudflare_tunnel_config" "legion" {
       }
     }
 
-    # voidstash.xyz — private media stack
-    ingress_rule {
-      hostname = "stash.voidstash.xyz"
-      service  = "https://traefik.kube-system.svc:443"
-      origin_request {
-        no_tls_verify = true
-      }
-    }
-
-    ingress_rule {
-      hostname = "whisparr.voidstash.xyz"
-      service  = "https://traefik.kube-system.svc:443"
-      origin_request {
-        no_tls_verify = true
-      }
-    }
-
-    ingress_rule {
-      hostname = "prowlarr.voidstash.xyz"
-      service  = "https://traefik.kube-system.svc:443"
-      origin_request {
-        no_tls_verify = true
-      }
-    }
 
     # Catch-all — must be last
     ingress_rule {

servers/legion/voidstash.tf

@@ -1,32 +0,0 @@
-# voidstash.xyz — private media stack (Stash + Whisparr + Prowlarr)
-# Zone created via API: ba74d72edbea8023ff4ed6cb27487154
-# Nameservers delegated to Cloudflare from Porkbun
-
-data "cloudflare_zone" "voidstash" {
-  name = "voidstash.xyz"
-}
-
-# CNAME records → Cloudflare tunnel (proxied)
-resource "cloudflare_record" "stash" {
-  zone_id = data.cloudflare_zone.voidstash.id
-  name    = "stash"
-  type    = "CNAME"
-  content = "${var.cloudflare_tunnel_id}.cfargotunnel.com"
-  proxied = true
-}
-
-resource "cloudflare_record" "whisparr" {
-  zone_id = data.cloudflare_zone.voidstash.id
-  name    = "whisparr"
-  type    = "CNAME"
-  content = "${var.cloudflare_tunnel_id}.cfargotunnel.com"
-  proxied = true
-}
-
-resource "cloudflare_record" "prowlarr_voidstash" {
-  zone_id = data.cloudflare_zone.voidstash.id
-  name    = "prowlarr"
-  type    = "CNAME"
-  content = "${var.cloudflare_tunnel_id}.cfargotunnel.com"
-  proxied = true
-}