moved CNAME to public