add alpha/beta/gamma subdomains on neurontechnologies.ai

- Tunnel ingress rules for alpha/beta/gamma.neurontechnologies.ai
- DNS CNAME records pointing to legion tunnel
- k8s ingress rules routing to neuron-alpha/beta/gamma services (port 8001)
- TLS certs via cert-manager for new hostnames

servers/legion/dns-neurontechnologies.tf

@@ -43,6 +43,33 @@ resource "cloudflare_record" "nt_tunnel_stage" {
   ttl     = 1
 }
 
+resource "cloudflare_record" "nt_tunnel_alpha" {
+  zone_id = local.zone_neurontechnologies_ai
+  name    = "alpha"
+  type    = "CNAME"
+  content = "${var.cloudflare_tunnel_id}.cfargotunnel.com"
+  proxied = true
+  ttl     = 1
+}
+
+resource "cloudflare_record" "nt_tunnel_beta" {
+  zone_id = local.zone_neurontechnologies_ai
+  name    = "beta"
+  type    = "CNAME"
+  content = "${var.cloudflare_tunnel_id}.cfargotunnel.com"
+  proxied = true
+  ttl     = 1
+}
+
+resource "cloudflare_record" "nt_tunnel_gamma" {
+  zone_id = local.zone_neurontechnologies_ai
+  name    = "gamma"
+  type    = "CNAME"
+  content = "${var.cloudflare_tunnel_id}.cfargotunnel.com"
+  proxied = true
+  ttl     = 1
+}
+
 # ── Google Workspace MX records ──────────────────────────────────────────────
 resource "cloudflare_record" "nt_mx_1" {
   zone_id  = local.zone_neurontechnologies_ai
@@ -117,13 +144,10 @@ resource "cloudflare_record" "nt_google_verify" {
 }
 
 # ── DKIM ──────────────────────────────────────────────────────────────────────
-# Add after Google Workspace generates your DKIM key.
-# Google Admin Console → Apps → Google Workspace → Gmail → Authenticate email
-#
-# resource "cloudflare_record" "nt_dkim" {
-#   zone_id = local.zone_neurontechnologies_ai
-#   name    = "google._domainkey"
-#   type    = "TXT"
-#   content = "v=DKIM1; k=rsa; p=REPLACE_WITH_YOUR_DKIM_PUBLIC_KEY"
-#   ttl     = 3600
-# }
+resource "cloudflare_record" "nt_dkim" {
+  zone_id = local.zone_neurontechnologies_ai
+  name    = "google._domainkey"
+  type    = "TXT"
+  content = "v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CbdL8/TV2cklPmt/qb5cjtNYZwWQEOe2xIDDDnNTW/MkJfW7JTQP8v/OAOPACmJqEAG/fPdb8qwAn7S3YrYoPR2QG+CkBym3dq55IWEcMondfKVX2URnoelLlwt7juLwk6115Tgn0m0sGcqZvvF662xygrGb3SLkF6aeeO4fc6u5TsgkxBS5W2DngprbtlUmj+PjpIY5T3Jb6EWB3O2zbnKHKvDbYtaMq2P+fDr/EVM+qERdUyFjIFR41N7dbTHIP60+Sv4lbm5yd6FA8HCGFdeF6q2gTwxwh9bVMpe6oqHzGr1Z14qtwNohRdKWiwhYzowswIOPTK5VV2FwnKu9QIDAQAB"
+  ttl     = 3600
+}