diff --git a/README.md b/README.md
index bc83709..250b521 100644
--- a/README.md
+++ b/README.md
@@ -79,6 +79,8 @@
 
 
 ## TODO
+- using gitbucket user and not root
+- check gitbucket.war hash after download
 - maybe a nginx container with ssl???