TODO: security deployments

diff --git a/TODO.md b/TODO.md
index 88ce45b6fb09d5e9c7ffab7da69e371212455fa3..0dade33405960cf2bbc980c550445ce2a78628da 100644 (file)
--- a/TODO.md
+++ b/TODO.md
@@ -45,7 +45,9 @@ Puppet modules
 
 ### Security
 
-- apache: try libapache2-modsecurity.
+- apache:
+  - try libapache2-modsecurity.
+  - deploy https://git.immerda.ch/csp-report/
 - apt: check if squeeze-lts is being automatically processed.
 - loginrecords: deploy module.
 - ssh:
@@ -107,6 +109,12 @@ Puppet modules
   - cleanup hidden `/.gem`.
   - split prompt.sh in a separate bash-prompt repository and include it at `puppet-nodo` and `rhatto/apps.git`.
   - remove `import` statements from `init.pp`, which will need some refactoring in other modules like `ntp` to fix autoloading.
+- mail:
+  - deploy https://git.autistici.org/ale/smtp-fp/tree/master
+           https://github.com/EFForg/starttls-everywhere
+  - deploy https://developer.mozilla.org/en-US/docs/Mozilla/Thunderbird/Autoconfiguration#Configuration_server_at_ISP
+           https://git-ipuppet.immerda.ch/module-apache/commit/?id=058dbb366b96cae1f8fb0def65f73a698f1c375d
+           https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577616
 
 ### Features