diff --git a/TODO.md b/TODO.md
new file mode 100644
index 0000000..232e20c
--- /dev/null
+++ b/TODO.md
@@ -0,0 +1,29 @@
+# TODO
+
+## Must
+
+- [ ] Fix image uploads
+- [ ] Update recipe metadata
+- [ ] External OIDC server (+ move options to `.env.sample`)
+- [ ] Customisable Django `DJANGO_SECRET_KEY` and `DJANGO_SUPERUSER_PASSWORD`
+- [ ] Versioned recipe release
+
+## Should
+
+- [ ] Move secrets to Docker secrets
+  - [ ] Postgres password
+  - [ ] y-provider key
+  - [ ] OIDC secret
+  - [ ] SMTP password
+  - [ ] Minio password / `AWS_S3_SECRET_ACCESS_KEY`
+- [ ] Initial setup documentation
+- [ ] Move Minio bootstrap & DB migrate to `abra.sh` commands
+- [ ] Expose options in `.env.sample`:
+  - [ ] Branding
+  - [ ] Logging
+- [ ] SMTP
+
+## Could
+
+- [ ] External Minio service
+- [ ] Recipe CI tests