diff --git a/docs/milestones.md b/docs/milestones.md
index f5c144db..d7fdf76f 100644
--- a/docs/milestones.md
+++ b/docs/milestones.md
@@ -34,6 +34,7 @@
   - [ ] 100% automated (including backups and secrets management, double check with a full rebuild)
   - [ ] Cross platform inital controller support (Linux, macOS, Windows)
   - [ ] HA for everything
+  - [ ] Production ready LXD https://github.com/lxc/lxd/blob/master/doc/production-setup.md
   - [ ] Backup encrytion
   - [ ] Secure by default
   - [ ] DRY (or rule of three)
diff --git a/docs/todo.md b/docs/todo.md
index 4d982c9f..4dd920f6 100644
--- a/docs/todo.md
+++ b/docs/todo.md
@@ -1,16 +1,13 @@
 # TODO
 
-- [upgrade metallb helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L5)
-- [use ./values/metallb.yaml for this](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L13)
-- [upgrade nginx helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L28)
-- [upgrade cert-manager helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L39)
-- [use ./values/cert-manager.yaml for this](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L45)
-- [upgrade prometheus stack helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L56)
-- [upgrade longhorn helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L67)
-- [upgrade vault helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L78)
-- [HA Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L84)
-- [Auto unseal Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L85)
-- [automatic ingress and tunnel for all services](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L88)
+- [use ./values/metallb.yaml for this](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L12)
+- [upgrade cert-manager helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L37)
+- [use ./values/cert-manager.yaml for this](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L43)
+- [upgrade longhorn helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L64)
+- [upgrade vault helm version](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L75)
+- [HA Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L81)
+- [Auto unseal Vault](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L82)
+- [automatic ingress and tunnel for all services](../infra/modules/kubernetes-cluster-bootstrap/main.tf#L85)
 - [(optimize) DRY master and worker definition](../infra/platform/cluster.tf#L87)
 - [(bug) should be posible to put it in the profile instead lxd_profile.kubenode.config](../infra/platform/cluster.tf#L97)
 - [remote backend (etcd or minio)](../infra/platform/terraform.tf#L2)