diff --git a/.gitignore b/.gitignore
index 473fb9e..321c8d3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@ result
 .direnv
 .remote.toml
 _*
+/logs
diff --git a/README.md b/README.md
index c30d6ed..2973756 100644
--- a/README.md
+++ b/README.md
@@ -55,3 +55,4 @@
   * [ ] Support DNS auth
   * [ ] Setup aliases instead of a per-vhost cert?
     * [ ] Preferably setup a wildchar cert per host
+* [ ] once secrets are in place: coin a one true ssh key, automate adding ssh host public keys to flake