output "proxied_hostnames" {
  description = "Hostnames now proxied through Cloudflare."
  value       = [for r in cloudflare_record.api : r.name]
}

output "origin_auth_header" {
  description = "Header name the origin must enforce (value is secret, not exported)."
  value       = var.origin_auth_header
}