diff --git a/.gitignore b/.gitignore
index 5741ac3..4c18af0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,7 +3,7 @@
 #**/terraform/
 
 # Terraform state files
-**/terraform.tfstate.*.backup
+**/*.backup
 
 # Terraform variable files
 **/*.tfvars
diff --git a/CLAUDE.md b/CLAUDE.md
index f4b6338..874e1a1 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -113,7 +113,7 @@ talosctl --talosconfig talosconfig logs -f kubelet
     - Provider: `marcfrederick/porkbun ~> 1.3`
     - Credentials via `PORKBUN_API_KEY` and `PORKBUN_SECRET_API_KEY` env vars
     - Manages NS records for all Porkbun domains (as393837, cloudflare, or porkbun default NS)
-  - Backend: HTTP (credentials via env vars)
+  - Backend: Local state (committed to repo)
 
 - `home/` - Home lab configurations
   - `cluster/` - Kubernetes application deployments
@@ -131,7 +131,7 @@ talosctl --talosconfig talosconfig logs -f kubelet
 - Ansible user (UID 10001) with passwordless sudo
 - SSH keys fetched from GitHub for authentication
 - Tailscale requires `TAILSCALE_KEY` environment variable
-- OpenTofu credentials should use environment variables (TF_VAR_*, PORKBUN_API_KEY, PORKBUN_SECRET_API_KEY)
+- OpenTofu credentials should use environment variables (PORKBUN_API_KEY, PORKBUN_SECRET_API_KEY)
 
 ## Development Workflow