diff --git a/TODO.md b/TODO.md
new file mode 100644
index 0000000..79b84e4
--- /dev/null
+++ b/TODO.md
@@ -0,0 +1,19 @@
+Enable kubernetes internal service ip address subnet
+kubectl exec -it headscale-0 -n lekva-app-headscale -- headscale --config=/headscale/config/config.yaml routes enable pcloud-ingress -r 1
+
+
+pihole disable admin password
+pihole -a -p
+
+
+longhorn storage dir during bootstrap
+
+
+soft-serve keys in secret for fluxcd bootstrap
+
+
+create_env should initialize repo with config.yaml
+
+metallb memberlist
+kubectl create secret generic -n metallb-system memberlist --from-literal=secretkey="$(openssl rand -base64 128)"
+