diff --git a/TODO.md b/TODO.md
index 7783c06..c5599b3 100644
--- a/TODO.md
+++ b/TODO.md
@@ -1,6 +1,17 @@
-# I made a git deployment of this repo first
-# Lets back up the git repo of this one first from using databasus as well as the stroage for the git in aws first. This way i can check back ups - then I'll do the rest
+## AWS S3 + Terraform Setup (TODO - do first)
+- [ ] Create new S3 bucket for Terraform state (e.g. `juntekim-terraform-state`)
+- [ ] Enable versioning on the bucket
+- [ ] Set up Terraform with S3 backend pointing to new bucket
+- [ ] Use Terraform to define new infra (start with what exists, then expand)
+- [ ] Store all future infra changes via version-controlled Terraform in Forgejo
 
+## Forgejo Backup (TODO)
+- [ ] Set up restic CronJob to back up forgejo-pvc (/data) to S3
+  - Mount forgejo-pvc read-only in CronJob
+  - Use restic to snapshot to S3 bucket (need: S3_BUCKET, AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, RESTIC_PASSWORD)
+  - Schedule: daily
+- [ ] Forgejo postgres backup via databasus (separate)
+- [ ] Test restore from restic snapshot
 
 figure out how to do a back up for a small pvc and pv using traefik as the example
 how would i back everything in ceph storage to aws like i used to do in mist cron job when i it was just the local host