From 82b902f7c40cf93d5c1d7b08dcc1b6ffad2e07ff Mon Sep 17 00:00:00 2001
From: Will Anderson <andersonwilliam85@gmail.com>
Date: Mon, 23 Mar 2026 10:43:38 -0500
Subject: [PATCH] Move AdGuard to dns.nook.family, fix Agents.md service
 domains

---
 Agents.md                 | 8 ++++----
 servers/legion/adguard.tf | 6 +++---
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/Agents.md b/Agents.md
index 48b4fbe..949e70e 100644
--- a/Agents.md
+++ b/Agents.md
@@ -124,14 +124,13 @@ Argo CD UI: https://argocd.neuralplatform.ai
 
 ## Services & Domains
 
-### Internal (nook.family — LAN only, AdGuard DNS)
+### Family (nook.family — via Cloudflare tunnel)
 
 | Service | URL | Notes |
 |---------|-----|-------|
-| AdGuard | https://dns.nook.family | DNS + ad blocking |
-| Docker Registry | https://registry.nook.family | Push images here |
+| AdGuard | https://dns.nook.family | DNS + ad blocking (DoH: https://dns.nook.family/dns-query) |
 
-### Public (neuralplatform.ai — via Cloudflare tunnel)
+### Platform (neuralplatform.ai — via Cloudflare tunnel)
 
 | Service | URL | Notes |
 |---------|-----|-------|
@@ -143,6 +142,7 @@ Argo CD UI: https://argocd.neuralplatform.ai
 | Axon webhooks | https://axon.neuralplatform.ai | Webhook hub (port 3847) |
 | npm registry | https://npm.neuralplatform.ai | Verdaccio |
 | PyPI registry | https://pypi.neuralplatform.ai | devpi |
+| Docker Registry | https://registry.neuralplatform.ai | Push images here |
 | Registry UI | https://docker.neuralplatform.ai | Docker registry browser |
 
 ### NodePort services (direct to Legion IP)
diff --git a/servers/legion/adguard.tf b/servers/legion/adguard.tf
index f769b63..c1ddb0d 100644
--- a/servers/legion/adguard.tf
+++ b/servers/legion/adguard.tf
@@ -1,4 +1,4 @@
-# AdGuard Home — household DNS with ad blocking and local nook.family resolution
+# AdGuard Home — household DNS with ad blocking, local resolution, and DoH via dns.nook.family
 
 resource "kubernetes_namespace" "dns" {
   metadata {
@@ -117,12 +117,12 @@ resource "kubernetes_ingress_v1" "adguard" {
 
   spec {
     tls {
-      hosts       = ["dns.${var.domain_suffix}"]
+      hosts       = ["dns.nook.family"]
       secret_name = "adguard-tls"
     }
 
     rule {
-      host = "dns.${var.domain_suffix}"
+      host = "dns.nook.family"
       http {
         path {
           path      = "/"