From ef2ae715eeb46f24190049753090f20e9fc58809 Mon Sep 17 00:00:00 2001
From: Will Anderson <andersonwilliam85@gmail.com>
Date: Mon, 23 Mar 2026 07:57:10 -0500
Subject: [PATCH] Argo CD on neuralplatform.ai, fix domain_suffix vs
 infra_domain usage

---
 servers/legion/argocd.tf    | 6 +++---
 servers/legion/variables.tf | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/servers/legion/argocd.tf b/servers/legion/argocd.tf
index d2d9b93..6f83af3 100644
--- a/servers/legion/argocd.tf
+++ b/servers/legion/argocd.tf
@@ -20,7 +20,7 @@ resource "helm_release" "argocd" {
 
   values = [<<-YAML
     global:
-      domain: argocd.${var.domain_suffix}
+      domain: argocd.${var.infra_domain}
 
     server:
       ingress:
@@ -57,12 +57,12 @@ resource "kubernetes_ingress_v1" "argocd" {
 
   spec {
     tls {
-      hosts       = ["argocd.${var.domain_suffix}"]
+      hosts       = ["argocd.${var.infra_domain}"]
       secret_name = "argocd-tls"
     }
 
     rule {
-      host = "argocd.${var.domain_suffix}"
+      host = "argocd.${var.infra_domain}"
       http {
         path {
           path      = "/"
diff --git a/servers/legion/variables.tf b/servers/legion/variables.tf
index 8897ab8..8aabfc0 100644
--- a/servers/legion/variables.tf
+++ b/servers/legion/variables.tf
@@ -11,7 +11,7 @@ variable "legion_ip" {
 }
 
 variable "domain_suffix" {
-  description = "Domain suffix for nook.family family apps"
+  description = "Internal-only domain (nook.family) — not exposed via Cloudflare tunnel. Use infra_domain for public services."
   type        = string
   default     = "nook.family"
 }