From 3216aeac11a86d71695549f5651a4f7695c39a0b Mon Sep 17 00:00:00 2001
From: Yohan Boniface <yb@enix.org>
Date: Sun, 24 Mar 2019 15:45:58 +0100
Subject: [PATCH] Renamed + remote

---
 {kaba => copanier}/__init__.py                |   5 +-
 {kaba => copanier}/base.py                    |   0
 {kaba => copanier}/config.py                  |   2 +-
 {kaba => copanier}/emails.py                  |   0
 {kaba => copanier}/models.py                  |   4 +
 {kaba => copanier}/reports.py                 |   0
 {kaba => copanier}/session.py                 |   0
 {kaba => copanier}/static/app.css             |   0
 .../fonts/WorkSans/WorkSansBoldLatin.woff2    | Bin
 .../fonts/WorkSans/WorkSansBoldLatinExt.woff2 | Bin
 .../fonts/WorkSans/WorkSansLightLatin.woff2   | Bin
 .../WorkSans/WorkSansLightLatinExt.woff2      | Bin
 .../fonts/WorkSans/WorkSansRegularLatin.woff2 | Bin
 .../WorkSans/WorkSansRegularLatinExt.woff2    | Bin
 .../WorkSans/WorkSansSemiBoldLatin.woff2      | Bin
 .../WorkSans/WorkSansSemiBoldLatinExt.woff2   | Bin
 .../static/fonts/icomoon/icomoon.eot          | Bin
 .../static/fonts/icomoon/icomoon.svg          |   0
 .../static/fonts/icomoon/icomoon.ttf          | Bin
 .../static/fonts/icomoon/icomoon.woff         | Bin
 {kaba => copanier}/static/icomoon.css         |   0
 .../static/img/default_product.svg            |   0
 {kaba => copanier}/templates/base.html        |   2 +-
 {kaba => copanier}/templates/delivery.html    |   0
 .../templates/edit_delivery.html              |   0
 {kaba => copanier}/templates/home.html        |   0
 .../templates/includes/delivery_head.html     |   0
 .../templates/includes/modal.html             |   0
 .../templates/includes/modal_add_command.html |   0
 .../includes/modal_import_command.html        |   0
 .../templates/includes/modal_product.html     |   0
 {kaba => copanier}/templates/place_order.html |   0
 {kaba => copanier}/templates/sesame.html      |   0
 .../templates/signing_sheet.html              |   0
 {kaba => copanier}/utils.py                   |   0
 remote/__main__.py                            | 199 ++++++++++++++++++
 remote/certbot.ini                            |   4 +
 remote/config.yml                             |   4 +
 remote/copanier.service                       |  17 ++
 remote/gunicorn.conf                          |   4 +
 remote/letsencrypt.conf                       |   5 +
 remote/nginx-http.conf                        |  14 ++
 remote/nginx-https.conf                       |  40 ++++
 remote/nginx-snippet.conf                     |   6 +
 remote/ssl-renew                              |   5 +
 remote/ssl.conf                               |  15 ++
 requirements-dev.txt                          |   4 +
 requirements.txt                              |   7 +
 setup.cfg                                     |   4 +-
 tests/conftest.py                             |  14 +-
 tests/test_config.py                          |  18 +-
 tests/test_models.py                          |   2 +-
 tests/test_views.py                           |   2 +-
 53 files changed, 353 insertions(+), 24 deletions(-)
 rename {kaba => copanier}/__init__.py (98%)
 rename {kaba => copanier}/base.py (100%)
 rename {kaba => copanier}/config.py (92%)
 rename {kaba => copanier}/emails.py (100%)
 rename {kaba => copanier}/models.py (97%)
 rename {kaba => copanier}/reports.py (100%)
 rename {kaba => copanier}/session.py (100%)
 rename {kaba => copanier}/static/app.css (100%)
 rename {kaba => copanier}/static/fonts/WorkSans/WorkSansBoldLatin.woff2 (100%)
 rename {kaba => copanier}/static/fonts/WorkSans/WorkSansBoldLatinExt.woff2 (100%)
 rename {kaba => copanier}/static/fonts/WorkSans/WorkSansLightLatin.woff2 (100%)
 rename {kaba => copanier}/static/fonts/WorkSans/WorkSansLightLatinExt.woff2 (100%)
 rename {kaba => copanier}/static/fonts/WorkSans/WorkSansRegularLatin.woff2 (100%)
 rename {kaba => copanier}/static/fonts/WorkSans/WorkSansRegularLatinExt.woff2 (100%)
 rename {kaba => copanier}/static/fonts/WorkSans/WorkSansSemiBoldLatin.woff2 (100%)
 rename {kaba => copanier}/static/fonts/WorkSans/WorkSansSemiBoldLatinExt.woff2 (100%)
 rename {kaba => copanier}/static/fonts/icomoon/icomoon.eot (100%)
 rename {kaba => copanier}/static/fonts/icomoon/icomoon.svg (100%)
 rename {kaba => copanier}/static/fonts/icomoon/icomoon.ttf (100%)
 rename {kaba => copanier}/static/fonts/icomoon/icomoon.woff (100%)
 rename {kaba => copanier}/static/icomoon.css (100%)
 rename {kaba => copanier}/static/img/default_product.svg (100%)
 rename {kaba => copanier}/templates/base.html (92%)
 rename {kaba => copanier}/templates/delivery.html (100%)
 rename {kaba => copanier}/templates/edit_delivery.html (100%)
 rename {kaba => copanier}/templates/home.html (100%)
 rename {kaba => copanier}/templates/includes/delivery_head.html (100%)
 rename {kaba => copanier}/templates/includes/modal.html (100%)
 rename {kaba => copanier}/templates/includes/modal_add_command.html (100%)
 rename {kaba => copanier}/templates/includes/modal_import_command.html (100%)
 rename {kaba => copanier}/templates/includes/modal_product.html (100%)
 rename {kaba => copanier}/templates/place_order.html (100%)
 rename {kaba => copanier}/templates/sesame.html (100%)
 rename {kaba => copanier}/templates/signing_sheet.html (100%)
 rename {kaba => copanier}/utils.py (100%)
 create mode 100644 remote/__main__.py
 create mode 100644 remote/certbot.ini
 create mode 100644 remote/config.yml
 create mode 100644 remote/copanier.service
 create mode 100644 remote/gunicorn.conf
 create mode 100644 remote/letsencrypt.conf
 create mode 100644 remote/nginx-http.conf
 create mode 100644 remote/nginx-https.conf
 create mode 100644 remote/nginx-snippet.conf
 create mode 100644 remote/ssl-renew
 create mode 100644 remote/ssl.conf
 create mode 100644 requirements-dev.txt
 create mode 100644 requirements.txt

diff --git a/kaba/__init__.py b/copanier/__init__.py
similarity index 98%
rename from kaba/__init__.py
rename to copanier/__init__.py
index 33d36ef..ae10225 100644
--- a/kaba/__init__.py
+++ b/copanier/__init__.py
@@ -52,7 +52,7 @@ class Roll(Roll):
 
 
 env = Environment(
-    loader=PackageLoader("kaba", "templates"), autoescape=select_autoescape(["kaba"])
+    loader=PackageLoader("copanier", "templates"), autoescape=select_autoescape(["copanier"])
 )
 
 
@@ -116,6 +116,7 @@ async def attach_request(request, response):
 @app.listen("startup")
 async def on_startup():
     configure()
+    Delivery.init_fs()
 
 
 @app.route("/sésame", methods=["GET"])
@@ -340,7 +341,7 @@ def cli_wrapper():
 def serve(reload=False):
     """Run a web server (for development only)."""
     if reload:
-        hupper.start_reloader("kaba.serve")
+        hupper.start_reloader("copanier.serve")
     traceback(app)
     static(app, root=Path(__file__).parent / "static")
     simple_server(app, port=2244)
diff --git a/kaba/base.py b/copanier/base.py
similarity index 100%
rename from kaba/base.py
rename to copanier/base.py
diff --git a/kaba/config.py b/copanier/config.py
similarity index 92%
rename from kaba/config.py
rename to copanier/config.py
index beca4ba..96278ee 100644
--- a/kaba/config.py
+++ b/copanier/config.py
@@ -16,7 +16,7 @@ FROM_EMAIL = "contact@epinamap.org"
 def init():
     for key, value in globals().items():
         if key.isupper():
-            env_key = "KABA_" + key
+            env_key = "COPANIER_" + key
             typ = type(value)
             if env_key in os.environ:
                 globals()[key] = typ(os.environ[env_key])
diff --git a/kaba/emails.py b/copanier/emails.py
similarity index 100%
rename from kaba/emails.py
rename to copanier/emails.py
diff --git a/kaba/models.py b/copanier/models.py
similarity index 97%
rename from kaba/models.py
rename to copanier/models.py
index 1d71078..79b010d 100644
--- a/kaba/models.py
+++ b/copanier/models.py
@@ -139,6 +139,10 @@ class Delivery(Base):
     def is_open(self):
         return datetime.now().date() <= self.order_before.date()
 
+    @classmethod
+    def init_fs(cls):
+        cls.get_root().mkdir(parents=True, exist_ok=True)
+
     @classmethod
     def get_root(cls):
         return Path(config.DATA_ROOT) / cls.__root__
diff --git a/kaba/reports.py b/copanier/reports.py
similarity index 100%
rename from kaba/reports.py
rename to copanier/reports.py
diff --git a/kaba/session.py b/copanier/session.py
similarity index 100%
rename from kaba/session.py
rename to copanier/session.py
diff --git a/kaba/static/app.css b/copanier/static/app.css
similarity index 100%
rename from kaba/static/app.css
rename to copanier/static/app.css
diff --git a/kaba/static/fonts/WorkSans/WorkSansBoldLatin.woff2 b/copanier/static/fonts/WorkSans/WorkSansBoldLatin.woff2
similarity index 100%
rename from kaba/static/fonts/WorkSans/WorkSansBoldLatin.woff2
rename to copanier/static/fonts/WorkSans/WorkSansBoldLatin.woff2
diff --git a/kaba/static/fonts/WorkSans/WorkSansBoldLatinExt.woff2 b/copanier/static/fonts/WorkSans/WorkSansBoldLatinExt.woff2
similarity index 100%
rename from kaba/static/fonts/WorkSans/WorkSansBoldLatinExt.woff2
rename to copanier/static/fonts/WorkSans/WorkSansBoldLatinExt.woff2
diff --git a/kaba/static/fonts/WorkSans/WorkSansLightLatin.woff2 b/copanier/static/fonts/WorkSans/WorkSansLightLatin.woff2
similarity index 100%
rename from kaba/static/fonts/WorkSans/WorkSansLightLatin.woff2
rename to copanier/static/fonts/WorkSans/WorkSansLightLatin.woff2
diff --git a/kaba/static/fonts/WorkSans/WorkSansLightLatinExt.woff2 b/copanier/static/fonts/WorkSans/WorkSansLightLatinExt.woff2
similarity index 100%
rename from kaba/static/fonts/WorkSans/WorkSansLightLatinExt.woff2
rename to copanier/static/fonts/WorkSans/WorkSansLightLatinExt.woff2
diff --git a/kaba/static/fonts/WorkSans/WorkSansRegularLatin.woff2 b/copanier/static/fonts/WorkSans/WorkSansRegularLatin.woff2
similarity index 100%
rename from kaba/static/fonts/WorkSans/WorkSansRegularLatin.woff2
rename to copanier/static/fonts/WorkSans/WorkSansRegularLatin.woff2
diff --git a/kaba/static/fonts/WorkSans/WorkSansRegularLatinExt.woff2 b/copanier/static/fonts/WorkSans/WorkSansRegularLatinExt.woff2
similarity index 100%
rename from kaba/static/fonts/WorkSans/WorkSansRegularLatinExt.woff2
rename to copanier/static/fonts/WorkSans/WorkSansRegularLatinExt.woff2
diff --git a/kaba/static/fonts/WorkSans/WorkSansSemiBoldLatin.woff2 b/copanier/static/fonts/WorkSans/WorkSansSemiBoldLatin.woff2
similarity index 100%
rename from kaba/static/fonts/WorkSans/WorkSansSemiBoldLatin.woff2
rename to copanier/static/fonts/WorkSans/WorkSansSemiBoldLatin.woff2
diff --git a/kaba/static/fonts/WorkSans/WorkSansSemiBoldLatinExt.woff2 b/copanier/static/fonts/WorkSans/WorkSansSemiBoldLatinExt.woff2
similarity index 100%
rename from kaba/static/fonts/WorkSans/WorkSansSemiBoldLatinExt.woff2
rename to copanier/static/fonts/WorkSans/WorkSansSemiBoldLatinExt.woff2
diff --git a/kaba/static/fonts/icomoon/icomoon.eot b/copanier/static/fonts/icomoon/icomoon.eot
similarity index 100%
rename from kaba/static/fonts/icomoon/icomoon.eot
rename to copanier/static/fonts/icomoon/icomoon.eot
diff --git a/kaba/static/fonts/icomoon/icomoon.svg b/copanier/static/fonts/icomoon/icomoon.svg
similarity index 100%
rename from kaba/static/fonts/icomoon/icomoon.svg
rename to copanier/static/fonts/icomoon/icomoon.svg
diff --git a/kaba/static/fonts/icomoon/icomoon.ttf b/copanier/static/fonts/icomoon/icomoon.ttf
similarity index 100%
rename from kaba/static/fonts/icomoon/icomoon.ttf
rename to copanier/static/fonts/icomoon/icomoon.ttf
diff --git a/kaba/static/fonts/icomoon/icomoon.woff b/copanier/static/fonts/icomoon/icomoon.woff
similarity index 100%
rename from kaba/static/fonts/icomoon/icomoon.woff
rename to copanier/static/fonts/icomoon/icomoon.woff
diff --git a/kaba/static/icomoon.css b/copanier/static/icomoon.css
similarity index 100%
rename from kaba/static/icomoon.css
rename to copanier/static/icomoon.css
diff --git a/kaba/static/img/default_product.svg b/copanier/static/img/default_product.svg
similarity index 100%
rename from kaba/static/img/default_product.svg
rename to copanier/static/img/default_product.svg
diff --git a/kaba/templates/base.html b/copanier/templates/base.html
similarity index 92%
rename from kaba/templates/base.html
rename to copanier/templates/base.html
index e70ab94..5823ccc 100644
--- a/kaba/templates/base.html
+++ b/copanier/templates/base.html
@@ -17,7 +17,7 @@
         <section class="notification {{ message[1] }}"><i class="icon-megaphone"></i> {{ message[0] }}</section>
     {% endif %}
     <section class="menu">
-        <h1><a href="/">Panio</a> <small>Les paniers piano d'Épinamap</small></h1>
+        <h1><a href="/">Copanier</a> <small>Les paniers piano d'Épinamap</small></h1>
         <nav>
             <a href="/livraison">Nouvelle livraison</a>
             {% if request["user"] %}
diff --git a/kaba/templates/delivery.html b/copanier/templates/delivery.html
similarity index 100%
rename from kaba/templates/delivery.html
rename to copanier/templates/delivery.html
diff --git a/kaba/templates/edit_delivery.html b/copanier/templates/edit_delivery.html
similarity index 100%
rename from kaba/templates/edit_delivery.html
rename to copanier/templates/edit_delivery.html
diff --git a/kaba/templates/home.html b/copanier/templates/home.html
similarity index 100%
rename from kaba/templates/home.html
rename to copanier/templates/home.html
diff --git a/kaba/templates/includes/delivery_head.html b/copanier/templates/includes/delivery_head.html
similarity index 100%
rename from kaba/templates/includes/delivery_head.html
rename to copanier/templates/includes/delivery_head.html
diff --git a/kaba/templates/includes/modal.html b/copanier/templates/includes/modal.html
similarity index 100%
rename from kaba/templates/includes/modal.html
rename to copanier/templates/includes/modal.html
diff --git a/kaba/templates/includes/modal_add_command.html b/copanier/templates/includes/modal_add_command.html
similarity index 100%
rename from kaba/templates/includes/modal_add_command.html
rename to copanier/templates/includes/modal_add_command.html
diff --git a/kaba/templates/includes/modal_import_command.html b/copanier/templates/includes/modal_import_command.html
similarity index 100%
rename from kaba/templates/includes/modal_import_command.html
rename to copanier/templates/includes/modal_import_command.html
diff --git a/kaba/templates/includes/modal_product.html b/copanier/templates/includes/modal_product.html
similarity index 100%
rename from kaba/templates/includes/modal_product.html
rename to copanier/templates/includes/modal_product.html
diff --git a/kaba/templates/place_order.html b/copanier/templates/place_order.html
similarity index 100%
rename from kaba/templates/place_order.html
rename to copanier/templates/place_order.html
diff --git a/kaba/templates/sesame.html b/copanier/templates/sesame.html
similarity index 100%
rename from kaba/templates/sesame.html
rename to copanier/templates/sesame.html
diff --git a/kaba/templates/signing_sheet.html b/copanier/templates/signing_sheet.html
similarity index 100%
rename from kaba/templates/signing_sheet.html
rename to copanier/templates/signing_sheet.html
diff --git a/kaba/utils.py b/copanier/utils.py
similarity index 100%
rename from kaba/utils.py
rename to copanier/utils.py
diff --git a/remote/__main__.py b/remote/__main__.py
new file mode 100644
index 0000000..a073f5a
--- /dev/null
+++ b/remote/__main__.py
@@ -0,0 +1,199 @@
+import os
+import sys
+from io import StringIO
+
+import minicli
+from usine import chown, config, connect, env, exists, mkdir, put, run, sudo, template
+
+
+@minicli.cli
+def pip(*command):
+    """Run a pip command on the remote server.
+    """
+    with sudo(user="copanier"):
+        run(f"/srv/copanier/venv/bin/pip {' '.join(command)}")
+
+
+@minicli.cli
+def system():
+    """Setup the system."""
+    with sudo():
+        run("apt update")
+        run(
+            "apt install -y nginx git software-properties-common gcc "
+            "python3.7 python3.7-dev python3.7-venv pkg-config"
+        )
+        mkdir("/srv/copanier/logs")
+        run("useradd -N copanier -d /srv/copanier/ || exit 0")
+        chown("copanier:users", "/srv/copanier/")
+        run("chsh -s /bin/bash copanier")
+
+
+@minicli.cli
+def venv():
+    """Setup the python virtualenv."""
+    path = "/srv/copanier/venv/"
+    if not exists(path):
+        with sudo(user="copanier"):
+            run(f"python3.7 -m venv {path}")
+    pip("install pip -U")
+
+
+@minicli.cli
+def http():
+    """Configure Nginx and letsencrypt."""
+    # When we'll have a domain.
+    put("remote/nginx-snippet.conf", "/etc/nginx/snippets/copanier.conf")
+    put("remote/letsencrypt.conf", "/etc/nginx/snippets/letsencrypt.conf")
+    put("remote/ssl.conf", "/etc/nginx/snippets/ssl.conf")
+    domain = config.domains[0]
+    pempath = f"/etc/letsencrypt/live/{domain}/fullchain.pem"
+    with sudo():
+        if exists(pempath):
+            print(f"{pempath} found, using https configuration")
+            conf = template(
+                "remote/nginx-https.conf",
+                domains=" ".join(config.domains),
+                domain=domain,
+            )
+        else:
+            print(f"{pempath} not found, using http configuration")
+            # Before letsencrypt.
+            conf = template(
+                "remote/nginx-http.conf",
+                domains=" ".join(config.domains),
+                domain=domain,
+            )
+        put(conf, "/etc/nginx/sites-enabled/copanier.conf")
+        restart("nginx")
+
+
+@minicli.cli
+def letsencrypt():
+    """Configure letsencrypt."""
+    with sudo():
+        run("add-apt-repository --yes ppa:certbot/certbot")
+        run("apt update")
+        run("apt install -y certbot")
+        mkdir("/var/www/letsencrypt/.well-known/acme-challenge")
+        domains = ",".join(list(config.domains))
+        certbot_conf = template("remote/certbot.ini", domains=domains)
+        put(certbot_conf, "/var/www/certbot.ini")
+        run("certbot certonly -c /var/www/certbot.ini --non-interactive " "--agree-tos")
+
+
+@minicli.cli
+def bootstrap():
+    """Bootstrap the system."""
+    system()
+    venv()
+    service()
+    http()
+
+
+@minicli.cli
+def cli(command):
+    """Run the copanier executable on the remote server.
+    """
+    with sudo(user="copanier"), env(COPANIER_DATA_ROOT="/srv/copanier/data"):
+        run(f"/srv/copanier/venv/bin/copanier {command}")
+
+
+@minicli.cli
+def service():
+    """Deploy/update the copanier systemd service."""
+    with sudo():
+        put("remote/copanier.service", "/etc/systemd/system/copanier.service")
+        systemctl("enable copanier.service")
+
+
+@minicli.cli
+def deploy():
+    """Deploy/update the copanier code base."""
+    with sudo(user="copanier"):
+        put("remote/gunicorn.conf", "/srv/copanier/gunicorn.conf")
+        pip("install gunicorn")
+        base = "https://framagit.org/ybon/copanier"
+        pip(f"install -U git+{base}")
+    restart()
+
+
+@minicli.cli
+def restart(*services):
+    """Restart the systemd services."""
+    services = services or ["copanier", "nginx"]
+    with sudo():
+        systemctl(f"restart {' '.join(services)}")
+
+
+@minicli.cli
+def systemctl(*args):
+    """Run a systemctl command on the remote server.
+
+    :command: the systemctl command to run.
+    """
+    run(f'systemctl {" ".join(args)}')
+
+
+@minicli.cli
+def logs(lines=50):
+    """Display the copanier logs.
+
+    :lines: number of lines to retrieve
+    """
+    with sudo():
+        run(f"journalctl --lines {lines} --unit copanier --follow")
+
+
+@minicli.cli
+def status():
+    """Get the services status."""
+    systemctl("status nginx copanier")
+
+
+@minicli.cli
+def access_logs():
+    """See the nginx access logs."""
+    with sudo():
+        run("tail -F /var/log/nginx/access.log")
+
+
+@minicli.cli
+def error_logs():
+    """See the nginx error logs."""
+    with sudo():
+        run("tail -F /var/log/nginx/error.log")
+
+
+@minicli.cli
+def upload_env():
+    """Upload environment vars to the server.
+
+    Use those to deal with info not commitable.
+    """
+    vars_ = {
+        "COPANIER_DATA_ROOT": "/srv/copanier/data",
+        "COPANIER_SEND_MAILS": "1",
+        "COPANIER_SMTP_PASSWORD": None,
+        "COPANIER_SMTP_LOGIN": None,
+    }
+    content = ""
+    for key, value in vars_.items():
+        try:
+            content += "{}={}\n".format(key, value or os.environ[key])
+        except KeyError:
+            sys.exit(f"The {key} environment variable does not exist.")
+    path = "/srv/copanier/env"
+    if exists(path):
+        run(f"cat {path}")
+    put(StringIO(content), path)
+
+
+@minicli.wrap
+def wrapper(hostname, configpath):
+    with connect(hostname=hostname, configpath=configpath):
+        yield
+
+
+if __name__ == "__main__":
+    minicli.run(hostname="qa", configpath="remote/config.yml")
diff --git a/remote/certbot.ini b/remote/certbot.ini
new file mode 100644
index 0000000..08de4c8
--- /dev/null
+++ b/remote/certbot.ini
@@ -0,0 +1,4 @@
+authenticator = webroot
+webroot-path = /var/www/letsencrypt
+domains = $$domains
+email = yohanboniface@free.fr
diff --git a/remote/config.yml b/remote/config.yml
new file mode 100644
index 0000000..dcd9d54
--- /dev/null
+++ b/remote/config.yml
@@ -0,0 +1,4 @@
+domains:
+- copanier.epinamap.org
+username: ubuntu
+hostname: 185.145.251.38
diff --git a/remote/copanier.service b/remote/copanier.service
new file mode 100644
index 0000000..8382514
--- /dev/null
+++ b/remote/copanier.service
@@ -0,0 +1,17 @@
+[Unit]
+Description=COPANIER
+After=syslog.target network.target
+
+[Service]
+Type=simple
+User=copanier
+ExecStart=/srv/copanier/venv/bin/gunicorn copanier:app --config gunicorn.conf
+WorkingDirectory=/srv/copanier/
+EnvironmentFile=/srv/copanier/env
+Restart=always
+RestartSec=5
+StandardOutput=journal
+SyslogIdentifier=COPANIER
+
+[Install]
+WantedBy=default.target
diff --git a/remote/gunicorn.conf b/remote/gunicorn.conf
new file mode 100644
index 0000000..92e0c79
--- /dev/null
+++ b/remote/gunicorn.conf
@@ -0,0 +1,4 @@
+worker_class = 'roll.worker.Worker'
+workers = 4
+bind = 'unix:/tmp/copanier.sock'
+log_level = 'debug'
diff --git a/remote/letsencrypt.conf b/remote/letsencrypt.conf
new file mode 100644
index 0000000..cf753de
--- /dev/null
+++ b/remote/letsencrypt.conf
@@ -0,0 +1,5 @@
+location ^~ /.well-known/acme-challenge/ {
+    default_type "text/plain";
+    root /var/www/letsencrypt;
+    auth_basic off;
+}
diff --git a/remote/nginx-http.conf b/remote/nginx-http.conf
new file mode 100644
index 0000000..0f5f3b1
--- /dev/null
+++ b/remote/nginx-http.conf
@@ -0,0 +1,14 @@
+upstream copanier {
+    server unix:///tmp/copanier.sock;
+}
+
+server {
+    listen 80;
+    server_name $${domains};
+
+    charset     utf-8;
+    client_max_body_size 1M;
+
+    include /etc/nginx/snippets/letsencrypt.conf;
+    include /etc/nginx/snippets/copanier.conf;
+}
diff --git a/remote/nginx-https.conf b/remote/nginx-https.conf
new file mode 100644
index 0000000..e7bf798
--- /dev/null
+++ b/remote/nginx-https.conf
@@ -0,0 +1,40 @@
+upstream copanier {
+    server unix:///tmp/copanier.sock;
+}
+
+server {
+    listen 80;
+
+    server_name $${domains};
+    include /etc/nginx/snippets/letsencrypt.conf;
+
+    location /nginx_status {
+        stub_status on;
+        access_log off;
+        allow 127.0.0.1;
+        deny all;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+
+server {
+    server_name $${domains};
+
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    ssl_certificate /etc/letsencrypt/live/$$domain/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/$$domain/privkey.pem;
+    ssl_trusted_certificate /etc/letsencrypt/live/$$domain/fullchain.pem;
+    include /etc/nginx/snippets/ssl.conf;
+    charset     utf-8;
+    client_max_body_size 1M;
+
+    include /etc/nginx/snippets/letsencrypt.conf;
+
+    include /etc/nginx/snippets/copanier.conf;
+}
diff --git a/remote/nginx-snippet.conf b/remote/nginx-snippet.conf
new file mode 100644
index 0000000..c1478bb
--- /dev/null
+++ b/remote/nginx-snippet.conf
@@ -0,0 +1,6 @@
+root /srv/copanier;
+
+location / {
+    proxy_pass http://copanier/;
+}
+
diff --git a/remote/ssl-renew b/remote/ssl-renew
new file mode 100644
index 0000000..6e5a544
--- /dev/null
+++ b/remote/ssl-renew
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+certbot -c /srv/eurordis/certbot.ini renew
+
+systemctl reload nginx
diff --git a/remote/ssl.conf b/remote/ssl.conf
new file mode 100644
index 0000000..bab5987
--- /dev/null
+++ b/remote/ssl.conf
@@ -0,0 +1,15 @@
+ssl_session_timeout 1d;
+ssl_session_cache shared:SSL:50m;
+ssl_session_tickets off;
+
+ssl_protocols TLSv1.2;
+ssl_ciphers EECDH+AESGCM:EECDH+AES;
+ssl_ecdh_curve secp384r1;
+ssl_prefer_server_ciphers on;
+
+ssl_stapling on;
+ssl_stapling_verify on;
+
+add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload";
+add_header X-Frame-Options DENY;
+add_header X-Content-Type-Options nosniff;
diff --git a/requirements-dev.txt b/requirements-dev.txt
new file mode 100644
index 0000000..c495d84
--- /dev/null
+++ b/requirements-dev.txt
@@ -0,0 +1,4 @@
+hupper
+pytest
+pytest-asyncio
+usine
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..55f124d
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1,7 @@
+Jinja2==2.10
+minicli==0.4.4
+openpyxl==2.6.1
+PyJWT==1.7.1
+PyYAML==5.1
+roll==0.10.1
+ujson==1.35
diff --git a/setup.cfg b/setup.cfg
index 7bb29c2..111734a 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -1,7 +1,7 @@
 [metadata]
-name = kaba
+name = copanier
 version = 0.0.1
 
 [options.entry_points]
 console_scripts =
-    kaba = kaba:main
+    copanier = copanier:main
diff --git a/tests/conftest.py b/tests/conftest.py
index b6db220..0b12b8c 100644
--- a/tests/conftest.py
+++ b/tests/conftest.py
@@ -5,14 +5,14 @@ import pytest
 from roll.extensions import traceback
 from roll.testing import Client as BaseClient
 
-from kaba import app as kaba_app
-from kaba import config as kconfig
-from kaba import create_token
-from kaba.models import Delivery, Person
+from copanier import app as copanier_app
+from copanier import config as kconfig
+from copanier import create_token
+from copanier.models import Delivery, Person
 
 
 def pytest_configure(config):
-    os.environ["KABA_DATA_ROOT"] = "tmp/db"
+    os.environ["COPANIER_DATA_ROOT"] = "tmp/db"
     kconfig.init()
     assert str(kconfig.DATA_ROOT) == "tmp/db"
 
@@ -58,8 +58,8 @@ def client(app, event_loop):
 
 @pytest.fixture
 def app():  # Requested by Roll testing utilities.
-    traceback(kaba_app)
-    return kaba_app
+    traceback(copanier_app)
+    return copanier_app
 
 
 @pytest.fixture
diff --git a/tests/test_config.py b/tests/test_config.py
index 6a61404..8487ddd 100644
--- a/tests/test_config.py
+++ b/tests/test_config.py
@@ -1,26 +1,26 @@
 import os
 from pathlib import Path
 
-from kaba import config
+from copanier import config
 
 
 def test_config_should_read_from_env():
-    old_root = os.environ.get("KABA_DATA_ROOT", "")
-    old_secret = os.environ.get("KABA_SECRET", "")
+    old_root = os.environ.get("COPANIER_DATA_ROOT", "")
+    old_secret = os.environ.get("COPANIER_SECRET", "")
     assert config.SECRET == "sikretfordevonly"
     assert isinstance(config.DATA_ROOT, Path)
-    os.environ["KABA_DATA_ROOT"] = "changeme"
-    os.environ["KABA_SECRET"] = "ultrasecret"
+    os.environ["COPANIER_DATA_ROOT"] = "changeme"
+    os.environ["COPANIER_SECRET"] = "ultrasecret"
     config.init()
     assert config.SECRET == "ultrasecret"
     assert isinstance(config.DATA_ROOT, Path)
     assert str(config.DATA_ROOT) == "changeme"
     if old_root:
-        os.environ["KABA_DATA_ROOT"] = old_root
+        os.environ["COPANIER_DATA_ROOT"] = old_root
     else:
-        del os.environ["KABA_DATA_ROOT"]
+        del os.environ["COPANIER_DATA_ROOT"]
     if old_secret:
-        os.environ["KABA_SECRET"] = old_secret
+        os.environ["COPANIER_SECRET"] = old_secret
     else:
-        del os.environ["KABA_SECRET"]
+        del os.environ["COPANIER_SECRET"]
     config.init()
diff --git a/tests/test_models.py b/tests/test_models.py
index 0a405a9..cf770ec 100644
--- a/tests/test_models.py
+++ b/tests/test_models.py
@@ -2,7 +2,7 @@ from datetime import datetime, timedelta
 
 import pytest
 
-from kaba.models import Delivery, Product, Person, Order, ProductOrder
+from copanier.models import Delivery, Product, Person, Order, ProductOrder
 
 
 now = datetime.now
diff --git a/tests/test_views.py b/tests/test_views.py
index 3104dfd..815194b 100644
--- a/tests/test_views.py
+++ b/tests/test_views.py
@@ -1,6 +1,6 @@
 import pytest
 
-from kaba.models import Delivery
+from copanier.models import Delivery
 
 pytestmark = pytest.mark.asyncio