# Homelab TODO

## Security (do ASAP)
- [ ] Regenerate Wings token on N.O.M.A.D. (was exposed in chat)
- [ ] Regenerate N.O.M.A.D. Newt secret (was exposed in chat)

## Infrastructure
- [ ] Deploy Pi-hole ×2 (primary on PD + backup on Serenity or Pi4)
- [ ] Set up off-site backup for vital data (appdata, databases, config repo, photos)
- [ ] Remove dead Unraid-Cloudflared-Tunnel container from Serenity
- [ ] Serenity malcolm pool capacity planning (heavily utilized)
- [ ] Add Pangolin resource for `ai.paccoco.com` → openwebui (port 8282)
- [ ] Add Cloudflare DNS A record for `ai.paccoco.com`
- [ ] Install fresh editor on PD
- [ ] Set up private Gitea repo for .env file backups

## AI Stack
- [ ] Pull `qwen2.5:14b` on PD ollama: `sudo docker exec -it ollama ollama pull qwen2.5:14b`
- [ ] Create OpenWebUI account and set system prompt from HOMELAB_AI_CONTEXT.md
- [ ] Disable signups in OpenWebUI after creating account
- [ ] Connect desktop Ollama to OpenWebUI (Admin → Settings → Connections)
- [ ] Set `OLLAMA_HOST=0.0.0.0` on desktop and restart Ollama service

## Planned Deployments (PD)
- [ ] dispatcharr
- [ ] gotify
- [ ] bytestash
- [ ] kima-hub
- [ ] n8n
- [ ] qdrant
- [ ] paperless-ngx

## Healthchecks
- [ ] Add healthcheck to ix-plex-plex-1
- [ ] Add healthcheck to ix-tailscale-tailscale-1
- [ ] Add healthcheck to ix-newt-newt-1
- [ ] Add healthcheck to ollama (no curl/wget — needs /proc/net/tcp6 or custom solution)
- [ ] Document and add healthchecks for meshtastic stack

## Documentation
- [ ] Document meshtastic stack fully (see docs/reference/MESHTASTIC.md)
- [ ] Fill in port/URL columns in SERVICES_DIRECTORY.md
- [ ] Document N.O.M.A.D. containers (start_nomad.sh services)