docs: update roadmap

docs/src/roadmap.md

@@ -21,13 +21,15 @@ Good enough for playaround with and personal use
   - [x] Vault
   - [x] Private container registry
   - [x] Homepage
-- [x] Cloudflare tunnel ~~or multi-cluster communication (via Wireguard or a service mesh like Linkerd)~~
+- [x] Cloudflare tunnel
 - [x] Automated DNS management
 - [x] Automated certificate management
 - [x] Initialize GitOps repository on Gitea automatically
 - [x] Observability
   - [x] Monitoring
   - [x] Logging
+  - [ ] Alerting
+- [ ] Replace all default passwords with randomly generated ones
 - [ ] 70% availability (might break in the weekend due to new experimentation)
 - [x] Only use open-source technologies (except external managed services in `./external`)
 - [x] Everything is defined as code
@@ -50,22 +52,20 @@ Can be used in "production" (for family or even small scale bussinesses)
   - [x] Seafile
   - [x] Blog
   - [ ] [Development dashboard](https://github.com/khuedoan/homelab-backstage)
-- [ ] Observability
-  - [ ] Alerting
 - [ ] SSO
-- [ ] 99,9% availability (less than 9 hours of downtime per year)
 - [ ] Backup solution (3 copies, 2 seperate devices, 1 offsite) with encryption
+- [ ] 99,9% availability (less than 9 hours of downtime per year)
+- [ ] 99,99% data durability
 - [ ] Secure by default
   - [ ] SELinux
-  - [ ] Firewall
   - [ ] Network policy
-  - [ ] Replace all default passwords with randomly generated ones
 - [ ] Static code analysis
 - [ ] Chaos testing
 - [ ] Minimal dependency on external services
 - [ ] Complete documentation and diagram as code
   - [x] Book (this book)
   - [ ] Walkthrough building tutorial and feature demo (video)
+- [ ] Configuration script for new users
 
 ## Unplanned
 
@@ -78,4 +78,4 @@ Nice to have
 - [ ] Security audit
 - [ ] Serverless (Knative)
 - [ ] Cluster API (https://github.com/khuedoan/homelab/pull/2)
-- [ ] Split DNS
+- [ ] Split DNS (requires a better router)