docs: add full homelab documentation structure

docs/planning/TODO.md

@@ -0,0 +1,43 @@
+# Homelab TODO
+
+## Security (do ASAP)
+- [ ] Regenerate Wings token on N.O.M.A.D. (was exposed in chat)
+- [ ] Regenerate N.O.M.A.D. Newt secret (was exposed in chat)
+
+## Infrastructure
+- [ ] Deploy Pi-hole ×2 (primary on PD + backup on Serenity or Pi4)
+- [ ] Set up off-site backup for vital data (appdata, databases, config repo, photos)
+- [ ] Remove dead Unraid-Cloudflared-Tunnel container from Serenity
+- [ ] Serenity malcolm pool capacity planning (heavily utilized)
+- [ ] Add Pangolin resource for `ai.paccoco.com` → openwebui (port 8282)
+- [ ] Add Cloudflare DNS A record for `ai.paccoco.com`
+- [ ] Install fresh editor on PD
+- [ ] Set up private Gitea repo for .env file backups
+
+## AI Stack
+- [ ] Pull `qwen2.5:14b` on PD ollama: `sudo docker exec -it ollama ollama pull qwen2.5:14b`
+- [ ] Create OpenWebUI account and set system prompt from HOMELAB_AI_CONTEXT.md
+- [ ] Disable signups in OpenWebUI after creating account
+- [ ] Connect desktop Ollama to OpenWebUI (Admin → Settings → Connections)
+- [ ] Set `OLLAMA_HOST=0.0.0.0` on desktop and restart Ollama service
+
+## Planned Deployments (PD)
+- [ ] dispatcharr
+- [ ] gotify
+- [ ] bytestash
+- [ ] kima-hub
+- [ ] n8n
+- [ ] qdrant
+- [ ] paperless-ngx
+
+## Healthchecks
+- [ ] Add healthcheck to ix-plex-plex-1
+- [ ] Add healthcheck to ix-tailscale-tailscale-1
+- [ ] Add healthcheck to ix-newt-newt-1
+- [ ] Add healthcheck to ollama (no curl/wget — needs /proc/net/tcp6 or custom solution)
+- [ ] Document and add healthchecks for meshtastic stack
+
+## Documentation
+- [ ] Document meshtastic stack fully (see docs/reference/MESHTASTIC.md)
+- [ ] Fill in port/URL columns in SERVICES_DIRECTORY.md
+- [ ] Document N.O.M.A.D. containers (start_nomad.sh services)