moved CNAME back to public