# Eternity Project TODO

- [x] Dockerized Flask publishing service with persistent storage.
- [x] Local accounts, administrator approval, and TOTP MFA.
- [x] QR-based MFA enrollment for iPhone and Android authenticators.
- [x] Email addresses, member password changes, and expiring password-reset links.
- [x] Configure production SMTP credentials and verify outgoing email delivery.
- [x] Rotate the initial `admin` password and enroll its authenticator.
- [x] Add CSRF protection to all state-changing forms.
- [x] Add automated database backups and test restoration.
- [x] Configure TLS reverse proxy and production domain for `eternityproject.fi`.