== puppet poneys ==
-* It's all perfect now
+* update external puppet modules
+** xinetd used: own module, maybe move to puppetlabs xinetd module
+* setup regression testing environment
== ud-ldap ==
* Non-DD accounts:
== Nagios config ==
* Way to have per user views. Doable with contacts, just needs to be done
+* Way to test IPv6, without duplicating all of our config
+== DNS/SSHFP ==
+* It'd be nice if service names like db.d.o had sshfp records in DNS. This is tricky because some of the purpose service names are CNAMEs, but not all.