diff --git a/media/jellyfin/dns-endpoint.yaml b/media/jellyfin/dns-endpoint-private.yaml
similarity index 100%
rename from media/jellyfin/dns-endpoint.yaml
rename to media/jellyfin/dns-endpoint-private.yaml
diff --git a/media/jellyfin/dns-endpoint-public.yaml b/media/jellyfin/dns-endpoint-public.yaml
new file mode 100644
index 0000000..2868fdb
--- /dev/null
+++ b/media/jellyfin/dns-endpoint-public.yaml
@@ -0,0 +1,15 @@
+apiVersion: externaldns.k8s.io/v1alpha1
+kind: DNSEndpoint
+metadata:
+  name: media.michaelthomson.dev
+  namespace: media
+spec:
+  endpoints:
+  - dnsName: media.michaelthomson.dev
+    recordTTL: 180
+    recordType: CNAME
+    targets:
+      - michaelthomson.ddns.net
+    providerSpecific:
+      - name: external-dns.alpha.kubernetes.io/cloudflare-proxied
+        value: "true"