This is a list of things that somebody should work on at some point. It’s like an issue tracker, but simpler, less effective, and harder to keep track of.

Tasks that are well defined and can be done:

• Replace h2o with caddy.
• Remove etesync.

Non-actionable tasks, poorly specified tasks, and questions to answer:

• Replace the python+cmark “wiki” with caddy’s markdown rendering.
  • Then add an edit button for the current page in git.
• Add CSP and Referrer-Policy headers (but don’t break any websites!).
• Do we want the X-* headers?
• What should be logged, and where?
  • In syslog? Over email? In #ahti.space?
• Help people move custom installs into ahtiports?
  • To better keep track of dependencies, etc.
• Should we split certs per-domain? (I think yes.)
• Should we set up a post-grease squirrel?
  • Quassel would like this, and maybe Etesync?
• Have a way to poll #ahti.space.
• Figure out if we’re vulnerable to a stampede of alpacas anywhere.
• Switch from Quassel to soju.
• Why does Forgejo need access to /etc/shadow?