Fix upstream skip validation

backend/src/lib/config/env.ts

@@ -108,6 +108,7 @@ const envSchema = z
     DAILY_RESOURCE_CLEAN_UP_DEVELOPMENT_MODE: zodStrBool.default("false").optional(),
     BDD_NOCK_API_ENABLED: zodStrBool.default("false").optional(),
     ACME_DEVELOPMENT_MODE: zodStrBool.default("false").optional(),
+    ACME_SKIP_UPSTREAM_VALIDATION: zodStrBool.default("false").optional(),
     ACME_DEVELOPMENT_HTTP01_CHALLENGE_HOST_OVERRIDES: zpStr(
       z
         .string()

backend/src/services/certificate-authority/acme/acme-certificate-authority-fns.ts

@@ -243,7 +243,7 @@ export const orderCertificate = async (
     challengePriority: ["dns-01"],
     // For ACME development mode, we mock the DNS challenge API calls. So, no real DNS records are created.
     // We need to disable the challenge verification to avoid errors.
-    skipChallengeVerification: getConfig().isAcmeDevelopmentMode,
+    skipChallengeVerification: getConfig().isAcmeDevelopmentMode && getConfig().ACME_SKIP_UPSTREAM_VALIDATION,
     termsOfServiceAgreed: true,
 
     challengeCreateFn: async (authz, challenge, keyAuthorization) => {

backend/src/services/certificate-authority/acme/dns-providers/cloudflare.ts

@@ -68,8 +68,6 @@ export const cloudflareDeleteTxtRecord = async (
       },
       params: {
         type: "TXT",
-        // TODO: this is incorrect. The domain seems need to be fqdn, but we are passing just the record name here.
-        //       as a result, we are not deleting the record correctly.
         name: domain,
         content: value
       }