diff --git a/README.md b/README.md
index c576eeb..100b3e5 100644
--- a/README.md
+++ b/README.md
@@ -160,6 +160,7 @@ the restore process is kind of fucked up but doable
 ## todo
 
 - further secure the server (ratelimiting, hardening...)
+- figure out best way to store .env, other credentials, and various secrets
 - more services
   - ~~gitea (need to change host ssh port)~~
   - vaultwarden