diff --git a/docs/TASKS.md b/docs/TASKS.md
index b63b29e..25e9fd4 100644
--- a/docs/TASKS.md
+++ b/docs/TASKS.md
@@ -4,7 +4,23 @@
 
 ## In Progress
 
-None currently.
+### OPNsense NAT Configuration (URGENT)
+Config was corrupted during editing. Restored to backup. Need to re-add:
+
+**Via OPNsense UI (https://10.4.2.1):**
+
+1. **Port Forwards** (Firewall → NAT → Port Forward):
+   - TCP 80 → 10.4.2.10:80 (Traefik HTTP)
+   - TCP 443 → 10.4.2.10:443 (Traefik HTTPS)
+   - TCP/UDP game ports → 10.4.2.26 (AMP server)
+
+2. **NAT Reflection** (Firewall → Settings → Advanced):
+   - Reflection for port forwards: Enable (NAT + proxy)
+
+3. **Disable Rebind Check** (System → Settings → Administration):
+   - Uncheck "HTTP Referer enforcement"
+
+4. **WireGuard** should still work (built into OPNsense 25.7)
 
 ## Pending