diff --git a/tf/cloudflare_idp_records.tf b/tf/cloudflare_idp_records.tf
index 7cdc075e..611d30c7 100644
--- a/tf/cloudflare_idp_records.tf
+++ b/tf/cloudflare_idp_records.tf
@@ -6,6 +6,7 @@ resource "cloudflare_record" "kerberos_master_tcp" {
   data {
     service = "_kerberos-master"
     proto = "_tcp"
+    name = "gensokyo.zone"
     priority = 0
     weight = 100
     port = 88
@@ -21,6 +22,7 @@ resource "cloudflare_record" "kerberos_master_udp" {
   data {
     service = "_kerberos-master"
     proto = "_udp"
+    name = "gensokyo.zone"
     priority = 0
     weight = 100
     port = 88
@@ -36,6 +38,7 @@ resource "cloudflare_record" "kerberos_tcp" {
   data {
     service = "_kerberos"
     proto = "_tcp"
+    name = "gensokyo.zone"
     priority = 0
     weight = 100
     port = 88
@@ -51,6 +54,7 @@ resource "cloudflare_record" "kerberos_udp" {
   data {
     service = "_kerberos"
     proto = "_udp"
+    name = "gensokyo.zone"
     priority = 0
     weight = 100
     port = 88
@@ -98,6 +102,7 @@ resource "cloudflare_record" "kpasswd_tcp" {
   data {
     service = "_kpasswd"
     proto = "_tcp"
+    name = "gensokyo.zone"
     priority = 0
     weight = 100
     port = 464
@@ -113,6 +118,7 @@ resource "cloudflare_record" "kpasswd_udp" {
   data {
     service = "_kpasswd"
     proto = "_udp"
+    name = "gensokyo.zone"
     priority = 0
     weight = 100
     port = 464
@@ -152,6 +158,7 @@ resource "cloudflare_record" "ldap" {
   data {
     service = "_ldap"
     proto = "_tcp"
+    name = "gensokyo.zone"
     priority = 0
     weight = 100
     port = 389