diff --git a/tf/environments/prod/dns_records.tf b/tf/environments/prod/dns_records.tf
index cc2467e0..3129e44d 100644
--- a/tf/environments/prod/dns_records.tf
+++ b/tf/environments/prod/dns_records.tf
@@ -302,14 +302,6 @@ resource "aws_route53_record" "prometheus-ooni-org-_CNAME_" {
   zone_id = local.dns_root_zone_ooni_org
 }
 
-resource "aws_route53_record" "quic-ooni-org-_A_" {
-  name    = "quic.ooni.org"
-  records = ["167.99.36.132"]
-  ttl     = "1799"
-  type    = "A"
-  zone_id = local.dns_root_zone_ooni_org
-}
-
 resource "aws_route53_record" "run-ooni-org-_CNAME_" {
   name    = "run.ooni.org"
   records = ["cname.vercel-dns.com"]
diff --git a/tf/modules/cloudhsm/main.tf b/tf/modules/cloudhsm/main.tf
index 02d2230b..97f71822 100644
--- a/tf/modules/cloudhsm/main.tf
+++ b/tf/modules/cloudhsm/main.tf
@@ -79,4 +79,9 @@ resource "aws_instance" "codesign_box" {
                 EOF
 
   tags = merge(var.tags, { Name = "codesign-box" })
+
+  // NOTE: remove the ignore_changes rule to deploy 
+  lifecycle {
+    ignore_changes = all
+  }
 }