Validate and document Dynu-rejected documentation IP ranges

examples/live_safe_dns_record/README.md

@@ -32,7 +32,7 @@ Edit `terraform.tfvars` and set at least:
 - `dynu_root_domain`
 - `test_suffix` (use a unique value per run)
 
-Optional overrides include `test_ipv4`, `test_ipv6`, and `test_cname_target`.
+Optional overrides include `test_ipv4`, `test_ipv6`, and `test_cname_target`. Use real routable IPs for `test_ipv4`/`test_ipv6`; Dynu rejects documentation ranges such as `192.0.2.0/24` and `2001:db8::/32`.
 
 ## Run
 

examples/live_safe_dns_record/terraform.tfvars.example

@@ -8,7 +8,7 @@ dynu_root_domain = "example.com"
 # Set to a unique value per run so records are clearly disposable.
 test_suffix = "manual"
 
-# Safe documentation values for live test scenarios.
+# Replace with real routable values for your environment (Dynu rejects documentation-only ranges).
 test_ipv4         = "192.0.2.123"
 test_ipv6         = "2001:db8::123"
 test_cname_target = "example.com"