diff --git a/servers/legion/dns-neurontechnologies.tf b/servers/legion/dns-neurontechnologies.tf
new file mode 100644
index 0000000..1150679
--- /dev/null
+++ b/servers/legion/dns-neurontechnologies.tf
@@ -0,0 +1,91 @@
+# ── neurontechnologies.ai DNS ─────────────────────────────────────────────────
+# Google Workspace MX, SPF, and DMARC records.
+# After signing up for Google Workspace, add your verification TXT record below.
+
+# ── Google Workspace MX records ──────────────────────────────────────────────
+resource "cloudflare_record" "nt_mx_1" {
+  zone_id  = local.zone_neurontechnologies_ai
+  name     = "@"
+  type     = "MX"
+  content  = "aspmx.l.google.com"
+  priority = 1
+  ttl      = 3600
+}
+
+resource "cloudflare_record" "nt_mx_2" {
+  zone_id  = local.zone_neurontechnologies_ai
+  name     = "@"
+  type     = "MX"
+  content  = "alt1.aspmx.l.google.com"
+  priority = 5
+  ttl      = 3600
+}
+
+resource "cloudflare_record" "nt_mx_3" {
+  zone_id  = local.zone_neurontechnologies_ai
+  name     = "@"
+  type     = "MX"
+  content  = "alt2.aspmx.l.google.com"
+  priority = 5
+  ttl      = 3600
+}
+
+resource "cloudflare_record" "nt_mx_4" {
+  zone_id  = local.zone_neurontechnologies_ai
+  name     = "@"
+  type     = "MX"
+  content  = "alt3.aspmx.l.google.com"
+  priority = 10
+  ttl      = 3600
+}
+
+resource "cloudflare_record" "nt_mx_5" {
+  zone_id  = local.zone_neurontechnologies_ai
+  name     = "@"
+  type     = "MX"
+  content  = "alt4.aspmx.l.google.com"
+  priority = 10
+  ttl      = 3600
+}
+
+# ── SPF ───────────────────────────────────────────────────────────────────────
+resource "cloudflare_record" "nt_spf" {
+  zone_id = local.zone_neurontechnologies_ai
+  name    = "@"
+  type    = "TXT"
+  content = "v=spf1 include:_spf.google.com ~all"
+  ttl     = 3600
+}
+
+# ── DMARC ─────────────────────────────────────────────────────────────────────
+resource "cloudflare_record" "nt_dmarc" {
+  zone_id = local.zone_neurontechnologies_ai
+  name    = "_dmarc"
+  type    = "TXT"
+  content = "v=DMARC1; p=quarantine; rua=mailto:admin@neurontechnologies.ai"
+  ttl     = 3600
+}
+
+# ── Google Workspace domain verification ─────────────────────────────────────
+# Uncomment and fill in your verification token from Google Workspace Admin
+# (Admin Console → Account → Domains → Manage domains → verify)
+#
+# resource "cloudflare_record" "nt_google_verify" {
+#   zone_id = local.zone_neurontechnologies_ai
+#   name    = "@"
+#   type    = "TXT"
+#   content = "google-site-verification=REPLACE_WITH_YOUR_TOKEN"
+#   ttl     = 3600
+# }
+
+# ── DKIM ──────────────────────────────────────────────────────────────────────
+# Add after Google Workspace generates your DKIM key.
+# Google Admin Console → Apps → Google Workspace → Gmail → Authenticate email
+#
+# resource "cloudflare_record" "nt_dkim" {
+#   zone_id = local.zone_neurontechnologies_ai
+#   name    = "google._domainkey"
+#   type    = "TXT"
+#   content = "v=DKIM1; k=rsa; p=REPLACE_WITH_YOUR_DKIM_PUBLIC_KEY"
+#   ttl     = 3600
+# }