cleanup: disable CNAME until DNS records are ready