In #137, I added an ACM certificate that validates via DNS for rrv.sh. The tf code outputs the DNS validation records, which currently have to be updated manually along with the CNAME to the ALB domain on Cloudflare. Ideally, this should be handled by OpenTofu.
