Add git-ssh DNS record, remove project assignment block

terraform/main.tf

@@ -151,15 +151,13 @@ resource "cloudflare_record" "vaultwarden" {
   ttl     = 1
 }
 
-# ─── Project assignment ───────────────────────────────────────────────────────
+# DNS only — no Cloudflare proxy, for direct SSH/git access
-
+resource "cloudflare_record" "git_ssh" {
-data "digitalocean_project" "infra" {
+  zone_id = data.cloudflare_zone.main.id
-  name = var.do_project_name
+  name    = "git-ssh"
+  type    = "A"
+  value   = digitalocean_droplet.gitea.ipv4_address
+  proxied = false
+  ttl     = 3600
 }
 
-resource "digitalocean_project_resources" "infra" {
-  project = data.digitalocean_project.infra.id
-  resources = [
-    digitalocean_droplet.gitea.urn,
-  ]
-}

terraform/variables.tf

@@ -36,9 +36,3 @@ variable "admin_ip" {
   description = "Your public IP for SSH and git access (without /32)"
   type        = string
 }
-
-variable "do_project_name" {
-  description = "DigitalOcean project name to assign resources to"
-  type        = string
-  default     = "lunarfront-infra"
-}