packages/terraform-config/
├── cloudflare/           # Cloudflare provider
│   └── zones/
│       └── codgician-me/
│           ├── default.nix       # Zone definition
│           └── records/          # DNS records (auto-discovered)
├── celestia/             # Azure provider
│   ├── cognitive/akasha/ # OpenAI deployments
│   ├── iam/              # Service principals
│   └── storage/          # Storage accounts
└── tonatiuh/             # GCP provider

# ✅ CORRECT: Nix attribute access (function call)
zone_id = config.resource.cloudflare_zone.codgician-me "id";

# ❌ WRONG: Terraform interpolation
zone_id = "${cloudflare_zone.codgician-me.id}";

{ config, ... }:
let
  zone_id = config.resource.cloudflare_zone.codgician-me "id";
  zone_name = config.resource.cloudflare_zone.codgician-me.name;
in {
  resource.cloudflare_dns_record.myservice-cname = {
    name = "myservice.${zone_name}";
    type = "CNAME";
    content = "paimon.codgician.me";
    proxied = false;
    ttl = 1;  # 1 = auto
    inherit zone_id;
  };
}