TODO update

diff --git a/TODO.md b/TODO.md
index b27d5478036027e8177e1fa3ca920cad4af60c75..cceb046181cea187cb1b260bd9fb733eb608b26e 100644 (file)
--- a/TODO.md
+++ b/TODO.md
@@ -43,13 +43,13 @@ Puppet modules
 
 ### Security
 
-- [DHE params deployment](https://weakdh.org/sysadmin.html).
 - badusb mitigations.
 - knock integration via https://github.com/juasiepo/knockd
 - apache:
   - https://httpd.apache.org/docs/2.4/upgrading.html
   - try libapache2-modsecurity.
   - deploy https://git.immerda.ch/csp-report/
+  - disable other_vhosts_access.log
 - apt: check if squeeze-lts is being automatically processed.
 - loginrecords: deploy module.
 - ssh:
@@ -128,6 +128,7 @@ Puppet modules
 - mail:
   - support for [preventing SPAM connections with bird](http://www.debian-administration.org/article/715/Preventing_SPAM_connections_with_bird.).
   - use ssl::dhparams, move to 2048 bit and use the standard file names and paths.
+    - [Feature #4012: postfix: ship 2048bit dh parameters - Platform - LEAP Issue Tracker](https://leap.se/code/issues/4012)
   - schleuder: manage `/etc/schleuder/schleuder.conf`, using `superadminaddr: root` or other recipient, to avoid mails
     sent as `root@localhost`.
   - deploy https://git.autistici.org/ale/smtp-fp/tree/master