Argo CD on neuralplatform.ai, fix domain_suffix vs infra_domain usage

servers/legion/argocd.tf

@@ -20,7 +20,7 @@ resource "helm_release" "argocd" {
 
   values = [<<-YAML
     global:
-      domain: argocd.${var.domain_suffix}
+      domain: argocd.${var.infra_domain}
 
     server:
       ingress:
@@ -57,12 +57,12 @@ resource "kubernetes_ingress_v1" "argocd" {
 
   spec {
     tls {
-      hosts       = ["argocd.${var.domain_suffix}"]
+      hosts       = ["argocd.${var.infra_domain}"]
       secret_name = "argocd-tls"
     }
 
     rule {
-      host = "argocd.${var.domain_suffix}"
+      host = "argocd.${var.infra_domain}"
       http {
         path {
           path      = "/"

servers/legion/variables.tf

@@ -11,7 +11,7 @@ variable "legion_ip" {
 }
 
 variable "domain_suffix" {
-  description = "Domain suffix for nook.family family apps"
+  description = "Internal-only domain (nook.family) — not exposed via Cloudflare tunnel. Use infra_domain for public services."
   type        = string
   default     = "nook.family"
 }