From 89e6c811d7e978f19bf8f2713cb0b10a58b78f58 Mon Sep 17 00:00:00 2001
From: Will Anderson <will@neuralplatform.ai>
Date: Wed, 29 Apr 2026 08:50:24 -0500
Subject: [PATCH] Update ArgoCD and neurontechnologies DNS config

---
 servers/legion/argocd.tf                 |  4 ++++
 servers/legion/dns-neurontechnologies.tf | 27 ++++++++++++++++++++++++
 2 files changed, 31 insertions(+)

diff --git a/servers/legion/argocd.tf b/servers/legion/argocd.tf
index 14253b8..c721c4f 100644
--- a/servers/legion/argocd.tf
+++ b/servers/legion/argocd.tf
@@ -154,5 +154,9 @@ resource "kubernetes_manifest" "argocd_root_app" {
     }
   }
 
+  field_manager {
+    force_conflicts = true
+  }
+
   depends_on = [helm_release.argocd, kubernetes_secret.argocd_gitea_repo]
 }
diff --git a/servers/legion/dns-neurontechnologies.tf b/servers/legion/dns-neurontechnologies.tf
index 5038c52..01c93f3 100644
--- a/servers/legion/dns-neurontechnologies.tf
+++ b/servers/legion/dns-neurontechnologies.tf
@@ -178,3 +178,30 @@ resource "cloudflare_record" "nt_dkim" {
   content = "v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CbdL8/TV2cklPmt/qb5cjtNYZwWQEOe2xIDDDnNTW/MkJfW7JTQP8v/OAOPACmJqEAG/fPdb8qwAn7S3YrYoPR2QG+CkBym3dq55IWEcMondfKVX2URnoelLlwt7juLwk6115Tgn0m0sGcqZvvF662xygrGb3SLkF6aeeO4fc6u5TsgkxBS5W2DngprbtlUmj+PjpIY5T3Jb6EWB3O2zbnKHKvDbYtaMq2P+fDr/EVM+qERdUyFjIFR41N7dbTHIP60+Sv4lbm5yd6FA8HCGFdeF6q2gTwxwh9bVMpe6oqHzGr1Z14qtwNohRdKWiwhYzowswIOPTK5VV2FwnKu9QIDAQAB"
   ttl     = 3600
 }
+
+# ── Resend DKIM ───────────────────────────────────────────────────────────────
+resource "cloudflare_record" "nt_resend_dkim" {
+  zone_id = local.zone_neurontechnologies_ai
+  name    = "resend._domainkey"
+  type    = "TXT"
+  content = "p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0/2NCH7IEgwYlRsL6ZFGqis2DU63LlWP4Cw6QFBgxVPDto9Le9Tqi6doHZuP/ijwoyDz4Ra68cV/bB1klrTHb4B6r8b3xDy8XcGShA45HljxYa22z2r4BUnmsFG5cXGT8pccYlix0LnVaXIVKPVprofznLNNv0T4/4v2x8ezh5wIDAQAB"
+  ttl     = 3600
+}
+
+# ── Resend SPF (send subdomain) ───────────────────────────────────────────────
+resource "cloudflare_record" "nt_resend_spf_mx" {
+  zone_id  = local.zone_neurontechnologies_ai
+  name     = "send"
+  type     = "MX"
+  content  = "feedback-smtp.us-east-1.amazonses.com"
+  priority = 10
+  ttl      = 3600
+}
+
+resource "cloudflare_record" "nt_resend_spf_txt" {
+  zone_id = local.zone_neurontechnologies_ai
+  name    = "send"
+  type    = "TXT"
+  content = "v=spf1 include:amazonses.com ~all"
+  ttl     = 3600
+}