diff --git a/tf/cloudflare_idp_records.tf b/tf/cloudflare_idp_records.tf
index 2623d2b9..7ef3d124 100644
--- a/tf/cloudflare_idp_records.tf
+++ b/tf/cloudflare_idp_records.tf
@@ -1,5 +1,7 @@
 locals {
-  idp_fqdn = "idp.${cloudflare_zone.gensokyo-zone_zone.zone}"
+  idp_fqdn    = "idp.${cloudflare_zone.gensokyo-zone_zone.zone}"
+  idp_uri_udp = "krb5srv:m:udp:${local.idp_fqdn}."
+  idp_uri_tcp = "krb5srv:m:tcp:${local.idp_fqdn}."
 }
 
 resource "cloudflare_record" "kerberos_master_tcp" {
@@ -81,7 +83,8 @@ resource "cloudflare_record" "kerberos_uri_tcp" {
   priority = 0
   data {
     weight  = 100
-    target = "krb5srv:m:tcp:${local.idp_fqdn}."
+    target  = local.idp_uri_tcp
+    content = local.idp_uri_tcp
   }
   ttl = 3600
 }
@@ -93,7 +96,8 @@ resource "cloudflare_record" "kerberos_uri_udp" {
   priority = 0
   data {
     weight  = 100
-    target = "krb5srv:m:udp:${local.idp_fqdn}."
+    target  = local.idp_uri_udp
+    content = local.idp_uri_udp
   }
   ttl = 3600
 }
@@ -137,7 +141,8 @@ resource "cloudflare_record" "kpasswd_uri_tcp" {
   priority = 0
   data {
     weight  = 100
-    target = "krb5srv:m:tcp:${local.idp_fqdn}."
+    target  = local.idp_uri_tcp
+    content = local.idp_uri_tcp
   }
   ttl = 3600
 }
@@ -149,7 +154,8 @@ resource "cloudflare_record" "kpasswd_uri_udp" {
   priority = 0
   data {
     weight  = 100
-    target = "krb5srv:m:udp:${local.idp_fqdn}."
+    target  = local.idp_uri_udp
+    content = local.idp_uri_udp
   }
   ttl = 3600
 }