# ── Cloudflare DNS — GCP-backed services ─────────────────────────────────────
# A records pointing to the GCP global load balancer IP.
# All subdomains share the same anycast IP (google_compute_global_address.prod).
#
# Cloudflare provider reads CLOUDFLARE_API_TOKEN from env.
# Zone ID for neurontechnologies.ai is set in terraform.tfvars.

# ── neuron.neurontechnologies.ai → Soma inference gateway ────────────────────

resource "cloudflare_record" "soma_neuron" {
  zone_id = var.cloudflare_zone_id_neurontechnologies
  name    = "neuron"
  type    = "A"
  content = google_compute_global_address.prod.address
  proxied = true
  ttl     = 1
}

# ── *.neurontechnologies.ai → Customer org subdomains ────────────────────────
# Enterprise customers get {org}.neurontechnologies.ai routed to soma.
# Soma reads the Host header to identify the tenant.

resource "cloudflare_record" "soma_wildcard" {
  zone_id = var.cloudflare_zone_id_neurontechnologies
  name    = "*"
  type    = "A"
  content = google_compute_global_address.prod.address
  proxied = true
  ttl     = 1
}