From 8bb1982b6f10ca17a411c53c3182f9b485e97482 Mon Sep 17 00:00:00 2001
From: Ales Verbic <verbotenj@blinklabs.io>
Date: Thu, 13 Nov 2025 12:16:07 -0500
Subject: [PATCH] feat: add DNS records support for submitapi

Signed-off-by: Ales Verbic <verbotenj@blinklabs.io>
---
 cloudflare.tf | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/cloudflare.tf b/cloudflare.tf
index e5e2a31..4f6981e 100644
--- a/cloudflare.tf
+++ b/cloudflare.tf
@@ -68,7 +68,7 @@ locals {
         }
       }
       tx_submit_api = {
-        enabled = false
+        enabled = true
         address = "submitapi-m1.demeter.run"
       }
     },
@@ -492,3 +492,20 @@ resource "cloudflare_load_balancer" "tx_submit_api_m1" {
   proxied         = true
   steering_policy = "off"
 }
+
+# DNS Records
+
+# Multiple CNAMEs: submitapi-m1.dmtr.host -> tx_submit_api.address (for each enabled provider)
+resource "cloudflare_dns_record" "submitapi_m1_cname" {
+  for_each = { for p in local.demeter_providers : p.name => p if p.tx_submit_api.enabled }
+
+  zone_id = var.cloudflare_zone_id
+  name    = "submitapi-m1"
+  type    = "CNAME"
+  content = each.value.tx_submit_api.address
+  ttl     = 60
+  proxied = true
+  lifecycle {
+    ignore_changes = [content] # Only update if the address changes in config
+  }
+}