diff --git a/TODO.md b/TODO.md
index 989da7c..250c616 100644
--- a/TODO.md
+++ b/TODO.md
@@ -1,5 +1,7 @@
 # TODO
 
-1. Connect sunken-ship to internet via wifi instead of ethernet.
+1. Host telegram bot once again (for what purpose?)
 
-2. Host telegram bot once again (for what purpose?)
+2. Encrypt sunken-ship (LUKS); update hardware/config for encrypted root and boot.
+
+3. Create a setup/boot USB that: installs NixOS on the server with encryption and WiFi configured from the start; only required input is the server's name (e.g. sunken-ship).