From f5da62bc11a1f97022bbdb62a6a4a78e23550246 Mon Sep 17 00:00:00 2001
From: Levi Zitting <me@levizitting.com>
Date: Sat, 8 Aug 2026 23:22:57 -0500
Subject: [PATCH 1/4] feat: route sgf.dev through public edge

---
 src/tf/modules/sgf.dev/main.tf | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/tf/modules/sgf.dev/main.tf b/src/tf/modules/sgf.dev/main.tf
index 798a0fb..1b5c054 100644
--- a/src/tf/modules/sgf.dev/main.tf
+++ b/src/tf/modules/sgf.dev/main.tf
@@ -15,7 +15,7 @@ locals {
     apex = {
       name    = "@"
       type    = "CNAME"
-      content = "middleout.levizitting.com"
+      content = var.x86_public_vps_target
       proxied = true
       ttl     = 1
     }
@@ -295,7 +295,7 @@ locals {
     www = {
       name    = "www"
       type    = "CNAME"
-      content = "sgf.dev"
+      content = var.x86_public_vps_target
       proxied = true
       ttl     = 1
     }

From 30d3e992c6f80c2ac76ea0c6445b9a661efb738d Mon Sep 17 00:00:00 2001
From: Levi Zitting <me@levizitting.com>
Date: Sat, 8 Aug 2026 23:26:10 -0500
Subject: [PATCH 2/4] fix: preserve www CNAME

---
 src/tf/modules/sgf.dev/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/tf/modules/sgf.dev/main.tf b/src/tf/modules/sgf.dev/main.tf
index 1b5c054..7867489 100644
--- a/src/tf/modules/sgf.dev/main.tf
+++ b/src/tf/modules/sgf.dev/main.tf
@@ -295,7 +295,7 @@ locals {
     www = {
       name    = "www"
       type    = "CNAME"
-      content = var.x86_public_vps_target
+      content = "sgf.dev"
       proxied = true
       ttl     = 1
     }

From ad52cd8e9f4881756ce57cbbe342b215542a7bc3 Mon Sep 17 00:00:00 2001
From: Levi Zitting <me@levizitting.com>
Date: Sat, 8 Aug 2026 23:31:19 -0500
Subject: [PATCH 3/4] feat: add production media CDN

---
 src/tf/modules/sgf.dev/main.tf | 57 +++++++++++++++++++++++++---------
 1 file changed, 43 insertions(+), 14 deletions(-)

diff --git a/src/tf/modules/sgf.dev/main.tf b/src/tf/modules/sgf.dev/main.tf
index 7867489..87eede7 100644
--- a/src/tf/modules/sgf.dev/main.tf
+++ b/src/tf/modules/sgf.dev/main.tf
@@ -173,6 +173,13 @@ locals {
       proxied = false
       ttl     = 1
     }
+    media = {
+      name    = "media"
+      type    = "CNAME"
+      content = "www.sgf.dev"
+      proxied = true
+      ttl     = 1
+    }
     media_staging = {
       name    = "media-staging"
       type    = "CNAME"
@@ -327,24 +334,46 @@ resource "cloudflare_ruleset" "cache" {
   kind    = "zone"
   phase   = "http_request_cache_settings"
 
-  rules = [{
-    ref         = "cache_media_staging"
-    description = "Cache staging media for one year at the edge"
-    expression  = "http.host eq \"media-staging.sgf.dev\""
-    action      = "set_cache_settings"
-    enabled     = true
+  rules = [
+    {
+      ref         = "cache_media"
+      description = "Cache production media for one year at the edge"
+      expression  = "http.host eq \"media.sgf.dev\""
+      action      = "set_cache_settings"
+      enabled     = true
 
-    action_parameters = {
-      cache = true
+      action_parameters = {
+        cache = true
 
-      edge_ttl = {
-        mode    = "override_origin"
-        default = 31536000
+        edge_ttl = {
+          mode    = "override_origin"
+          default = 31536000
+        }
+
+        browser_ttl = {
+          mode = "respect_origin"
+        }
       }
+    },
+    {
+      ref         = "cache_media_staging"
+      description = "Cache staging media for one year at the edge"
+      expression  = "http.host eq \"media-staging.sgf.dev\""
+      action      = "set_cache_settings"
+      enabled     = true
+
+      action_parameters = {
+        cache = true
+
+        edge_ttl = {
+          mode    = "override_origin"
+          default = 31536000
+        }
 
-      browser_ttl = {
-        mode = "respect_origin"
+        browser_ttl = {
+          mode = "respect_origin"
+        }
       }
     }
-  }]
+  ]
 }

From 2b902220abfd7b39c15706ac7963b78d0e5a235e Mon Sep 17 00:00:00 2001
From: Levi Zitting <me@levizitting.com>
Date: Sat, 8 Aug 2026 23:34:16 -0500
Subject: [PATCH 4/4] fix: remove unused Cloudflare cache ruleset

---
 src/tf/modules/sgf.dev/main.tf | 50 ----------------------------------
 1 file changed, 50 deletions(-)

diff --git a/src/tf/modules/sgf.dev/main.tf b/src/tf/modules/sgf.dev/main.tf
index 87eede7..5aa3ed4 100644
--- a/src/tf/modules/sgf.dev/main.tf
+++ b/src/tf/modules/sgf.dev/main.tf
@@ -327,53 +327,3 @@ resource "cloudflare_dns_record" "core" {
   proxied = each.value.proxied
   ttl     = each.value.ttl
 }
-
-resource "cloudflare_ruleset" "cache" {
-  zone_id = var.zone_id
-  name    = "Zone cache rules"
-  kind    = "zone"
-  phase   = "http_request_cache_settings"
-
-  rules = [
-    {
-      ref         = "cache_media"
-      description = "Cache production media for one year at the edge"
-      expression  = "http.host eq \"media.sgf.dev\""
-      action      = "set_cache_settings"
-      enabled     = true
-
-      action_parameters = {
-        cache = true
-
-        edge_ttl = {
-          mode    = "override_origin"
-          default = 31536000
-        }
-
-        browser_ttl = {
-          mode = "respect_origin"
-        }
-      }
-    },
-    {
-      ref         = "cache_media_staging"
-      description = "Cache staging media for one year at the edge"
-      expression  = "http.host eq \"media-staging.sgf.dev\""
-      action      = "set_cache_settings"
-      enabled     = true
-
-      action_parameters = {
-        cache = true
-
-        edge_ttl = {
-          mode    = "override_origin"
-          default = 31536000
-        }
-
-        browser_ttl = {
-          mode = "respect_origin"
-        }
-      }
-    }
-  ]
-}