diff --git a/hosts/drone/default.nix b/hosts/drone/default.nix
index f3f65e8f..50dc54f5 100644
--- a/hosts/drone/default.nix
+++ b/hosts/drone/default.nix
@@ -39,6 +39,8 @@ in
   };
 
   systemd.services = {
+    # TODO: hardening
+    # https://github.com/Mic92/dotfiles/commit/ca50aa545934f12999cb58f7cd452876c8b486de#diff-c83b36ea5739cf058ef055b65b20fa5e7fad16135b2d49c0f8968903146b985aL29-L64
     drone-runner-ssh = {
       wantedBy = [ "multi-user.target" ];
       after = [ "drone-server.service" ];