diff --git a/authentik/dns-endpoint-authentik.yaml b/authentik/dns-endpoint-authentik.yaml
index e7df3a8..4b2f79f 100644
--- a/authentik/dns-endpoint-authentik.yaml
+++ b/authentik/dns-endpoint-authentik.yaml
@@ -7,9 +7,9 @@ spec:
   endpoints:
   - dnsName: authentik.michaelthomson.dev
     recordTTL: 180
-    recordType: A
+    recordType: CNAME
     targets:
-      - 142.126.163.72
+      - michaelthomson.ddns.net
     providerSpecific:
       - name: external-dns.alpha.kubernetes.io/cloudflare-proxied
         value: "true"
diff --git a/immich/dns-endpoint.yaml b/immich/dns-endpoint.yaml
index 1d183a6..f5016df 100644
--- a/immich/dns-endpoint.yaml
+++ b/immich/dns-endpoint.yaml
@@ -7,9 +7,9 @@ spec:
   endpoints:
   - dnsName: immich.michaelthomson.dev
     recordTTL: 180
-    recordType: A
+    recordType: CNAME
     targets:
-      - 142.126.163.72
+      - michaelthomson.ddns.net
     providerSpecific:
       - name: external-dns.alpha.kubernetes.io/cloudflare-proxied
         value: "true"
diff --git a/michaelthomson/dns-endpoint.yaml b/michaelthomson/dns-endpoint.yaml
index 7f66d17..1e41019 100644
--- a/michaelthomson/dns-endpoint.yaml
+++ b/michaelthomson/dns-endpoint.yaml
@@ -7,9 +7,9 @@ spec:
   endpoints:
   - dnsName: michaelthomson.dev
     recordTTL: 180
-    recordType: A
+    recordType: CNAME
     targets:
-      - 142.126.163.72
+      - michaelthomson.ddns.net
     providerSpecific:
       - name: external-dns.alpha.kubernetes.io/cloudflare-proxied
         value: "true"