diff --git a/networking/firewall.mod.nix b/networking/firewall.mod.nix
index de93ce8..bf20cde 100644
--- a/networking/firewall.mod.nix
+++ b/networking/firewall.mod.nix
@@ -5,7 +5,7 @@
       networking.nftables.enable = true;
     })
     ({
-      networking.firewall.interfaces.wg0 = {
+      networking.firewall.interfaces.wg0 = { # TODO: set up prometheus authentication, perhaps with a certificate. not *that* urgent because it's only on the wireguard netwrok, maybe it's not even needed at all -e
         allowedTCPPorts = [
           6703
         ];