diff --git a/terraform/main.tf b/terraform/main.tf
index 62369b2..c02cf75 100644
--- a/terraform/main.tf
+++ b/terraform/main.tf
@@ -151,15 +151,13 @@ resource "cloudflare_record" "vaultwarden" {
   ttl     = 1
 }
 
-# ─── Project assignment ───────────────────────────────────────────────────────
-
-data "digitalocean_project" "infra" {
-  name = var.do_project_name
+# DNS only — no Cloudflare proxy, for direct SSH/git access
+resource "cloudflare_record" "git_ssh" {
+  zone_id = data.cloudflare_zone.main.id
+  name    = "git-ssh"
+  type    = "A"
+  value   = digitalocean_droplet.gitea.ipv4_address
+  proxied = false
+  ttl     = 3600
 }
 
-resource "digitalocean_project_resources" "infra" {
-  project = data.digitalocean_project.infra.id
-  resources = [
-    digitalocean_droplet.gitea.urn,
-  ]
-}
diff --git a/terraform/variables.tf b/terraform/variables.tf
index 69e7b4d..5f4d139 100644
--- a/terraform/variables.tf
+++ b/terraform/variables.tf
@@ -36,9 +36,3 @@ variable "admin_ip" {
   description = "Your public IP for SSH and git access (without /32)"
   type        = string
 }
-
-variable "do_project_name" {
-  description = "DigitalOcean project name to assign resources to"
-  type        = string
-  default     = "lunarfront-infra"
-}