diff --git a/kube/deploy/apps/piped/app/hr.yaml b/kube/deploy/apps/piped/app/hr.yaml
index 1124d05b..3ee771ac 100644
--- a/kube/deploy/apps/piped/app/hr.yaml
+++ b/kube/deploy/apps/piped/app/hr.yaml
@@ -152,7 +152,7 @@ spec:
       main:
         className: nginx-internal
         annotations: &cors
-          external-dns.alpha.kubernetes.io/target: "${DNS_CF}" # cloudflared handles proxying to backend pod directly, exposed for webhook
+          external-dns.alpha.kubernetes.io/target: "${DNS_CF:=127.0.0.1}" # cloudflared handles proxying to backend pod directly, exposed for webhook
           external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
           nginx.ingress.kubernetes.io/enable-cors: "true"
           nginx.ingress.kubernetes.io/cors-allow-origin: "https://${APP_DNS_PIPED:=piped}, https://${APP_DNS_PIPED_BACKEND}, https://${APP_DNS_PIPED_YTPROXY}"
@@ -164,14 +164,14 @@ spec:
                 service:
                   identifier: frontend
                   port: http
-          - host: "${APP_DNS_PIPED_BACKEND:=piped-backend}"
+          - host: "${APP_DNS_PIPED_BACKEND:=pipedbackend}"
             paths:
               - path: /
                 pathType: Prefix
                 service:
                   identifier: backend
                   port: http
-          - host: "${APP_DNS_PIPED_YTPROXY:=piped-ytproxy}"
+          - host: "${APP_DNS_PIPED_YTPROXY:=pipedytproxy}"
             paths:
               - path: /
                 pathType: Prefix