# ── neuralplatform.ai DNS ─────────────────────────────────────────────────────
# Infrastructure and platform service subdomains.
# All route through the legion Cloudflare tunnel to Traefik unless noted.

# vpn.neuralplatform.ai — Headscale coordination server (Tailscale control plane)
resource "cloudflare_record" "np_vpn" {
  zone_id = local.zone_neuralplatform_ai
  name    = "vpn"
  type    = "CNAME"
  content = "${var.cloudflare_tunnel_id}.cfargotunnel.com"
  proxied = true
  ttl     = 1
}

# web-stage.neuralplatform.ai — Phase 1 Legion deploy of neuron-web (the El
# native landing server). Coexists with the Cloud Run prod marketing site
# at neurontechnologies.ai; this lets us iterate on the native build.
resource "cloudflare_record" "np_web_stage" {
  zone_id = local.zone_neuralplatform_ai
  name    = "web-stage"
  type    = "CNAME"
  content = "${var.cloudflare_tunnel_id}.cfargotunnel.com"
  proxied = true
  ttl     = 1
}