diff --git a/.gitignore b/.gitignore
index 675c991..b7421d7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,4 @@ __pycache__
 gatekeeper.db
 .env
 .coverage
+result
diff --git a/README.md b/README.md
index 1242158..140bbfb 100644
--- a/README.md
+++ b/README.md
@@ -10,8 +10,20 @@ start prod server `uv run fastapi run`
 You need to set services.pcscd.enable = true; for the smartcard reader to work
 
 Issues:
+   - documentation missing
    - `nix run` currently broken
+   - raspberry pi image not working
    - no door state
    - no door operations
-   - card system is dummy until I get hardware
-    
+   - hardcoded secret key in auth.py -> centralise env var loading 
+   - i don't like the error handling in the scanner - doesn't pass errors correctly
+   - cors for frontend: https://fastapi.tiangolo.com/tutorial/cors
+   - disableCards var isn't doing anything
+   - BackgroundScanner shouldn't get a single session for the whole lifecycle
+   - input validation maybe
+   - too many imports
+   - inconsistent logging (request logging?)
+   - rate limiting maybe
+   - pretty sure the controllers are doing too much stuff
+   - hardware call tests or sth
+   - .env.example