Context
PR #20 adds an import-first Terraform scaffold under infra/cloudflare for tools.complyeaze.com DNS/cache/WAF. Do not apply it until existing dashboard-managed resources are imported and the plan is reviewed.
Manual steps
- identify current Cloudflare zone ID and existing tools.complyeaze.com DNS record ID
- identify existing cache/WAF rules that affect tools.complyeaze.com
- export CLOUDFLARE_API_TOKEN locally from a minimum-permission token
- run terraform init under infra/cloudflare
- terraform import cloudflare_dns_record.tools <zone_id>/<record_id>
- import any existing cache/WAF rulesets before Terraform owns them
- run terraform plan with tools_origin_target set to the current ingress target
Acceptance
- plan is attached to a PR or deployment note
- no apex complyeaze.com or pack.complyeaze.com resource is managed here
- no tfstate, tfvars, zone IDs, account IDs, or API tokens are committed
Context
PR #20 adds an import-first Terraform scaffold under infra/cloudflare for tools.complyeaze.com DNS/cache/WAF. Do not apply it until existing dashboard-managed resources are imported and the plan is reviewed.
Manual steps
Acceptance