diff --git a/flake.nix b/flake.nix
index 91c5c44..4a29625 100644
--- a/flake.nix
+++ b/flake.nix
@@ -87,7 +87,12 @@
           name = system;
           value = {
             default = pkgs.mkShell {
-              buildInputs = with pkgs; [ git terraform graphviz borgbackup ];
+              buildInputs = with pkgs; [
+                git
+                terraform_0_13
+                graphviz
+                borgbackup
+              ];
             };
           };
         }) [ "x86_64-linux" "x86_64-darwin" "aarch64-darwin" ]);
diff --git a/terraform/main.tf b/terraform/main.tf
index aef7a32..f2e9cd9 100644
--- a/terraform/main.tf
+++ b/terraform/main.tf
@@ -1,5 +1,5 @@
 terraform {
-  required_version = "~> 0.12"
+  required_version = "~> 0.13"
 
   backend "remote" {
     organization = "brianhicks"
@@ -14,7 +14,7 @@ terraform {
 variable "digitalocean_token" {}
 
 provider "digitalocean" {
-  version = "1.14.0"
+  version = "~> 2.22"
 
   token = var.digitalocean_token
 }
@@ -22,7 +22,7 @@ provider "digitalocean" {
 variable "cloudflare_token" {}
 
 provider "cloudflare" {
-  version = "~> 2.0"
+  version = "~> 3.22"
 
   api_token = var.cloudflare_token
 }
@@ -158,7 +158,7 @@ resource "cloudflare_record" "git_bytes_zone_caa" {
   type    = "CAA"
   ttl     = 1 # automatic
 
-  data = {
+  data {
     flags = 0
     tag   = "issue"
     value = "letsencrypt.org"
diff --git a/terraform/versions.tf b/terraform/versions.tf
new file mode 100644
index 0000000..a4c1c0b
--- /dev/null
+++ b/terraform/versions.tf
@@ -0,0 +1,11 @@
+terraform {
+  required_providers {
+    cloudflare = {
+      source = "cloudflare/cloudflare"
+    }
+    digitalocean = {
+      source = "digitalocean/digitalocean"
+    }
+  }
+  required_version = ">= 0.13"
+}