Initial public release.

10 files changed, 1534 insertions, 0 deletions

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..dec0d72
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,5 @@
+/parts
+/stage
+/snap
+/*.snap
+/test/config/*.conf
diff --git a/LICENSE.txt b/LICENSE.txt
new file mode 100644
index 0000000..2def0e8
--- /dev/null
+++ b/LICENSE.txt
@@ -0,0 +1,661 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+Program, your modified version must prominently offer all users
+interacting with it remotely through a computer network (if your version
+supports such interaction) an opportunity to receive the Corresponding
+Source of your version by providing access to the Corresponding Source
+from a network server at no charge, through some standard or customary
+means of facilitating copying of software.  This Corresponding Source
+shall include the Corresponding Source for any work covered by version 3
+of the GNU General Public License that is incorporated pursuant to the
+following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the work with which it is combined will remain governed by version
+3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU Affero General Public License from time to time.  Such new versions
+will be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU Affero General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU Affero General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU Affero General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If your software can interact with users remotely through a computer
+network, you should also make sure that it provides a way for users to
+get its source.  For example, if your program is a web application, its
+interface could display a "Source" link that leads users to an archive
+of the code.  There are many ways you could offer source, and different
+solutions will be better for different programs; see section 13 for the
+specific requirements.
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU AGPL, see
+<http://www.gnu.org/licenses/>.
\ No newline at end of file
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..ea4746b
--- /dev/null
+++ b/README.md
@@ -0,0 +1,17 @@
+# Spreed WebRTC snap
+
+This repository can be used to build a Spreed WebRTC snap for Ubuntu Snappy 16.04 by using
+[Snapcraft](https://github.com/ubuntu-core/snapcraft).
+
+## Build requirements
+
+ - Snapcraft 2.2
+ - Ubuntu 16.04
+
+## Building
+
+```bash
+$ snapcraft snap
+```
+
+-- (c)2016 struktur AG
\ No newline at end of file
diff --git a/config.py b/config.py
new file mode 100755
index 0000000..af1aeb0
--- /dev/null
+++ b/config.py
@@ -0,0 +1,316 @@
+#!/usr/bin/python3
+"""python3 config hook for Spreed WebRTC"""
+
+import collections
+import configparser
+import os
+import subprocess
+import sys
+import yaml
+
+SPREED_WEBRTC_DATA_PATH = os.environ['SNAP_APP_DATA_PATH']
+SPREED_WEBRTC_VERSION = os.environ['SNAP_VERSION']
+SPREED_WEBRTC_CONFIG_FILE = os.path.join(SPREED_WEBRTC_DATA_PATH,
+                                         'server.conf')
+START_CONFIG_FILE = os.path.join(SPREED_WEBRTC_DATA_PATH, 'start.conf')
+SPREED_WEBRTC_CONFIG_FILE_IN = os.path.join(os.environ['SNAP_APP_PATH'],
+                                            'server.conf.in')
+
+DEFAULT_REDIRECTOR_PORT = 8000
+DEFAULT_REVERSE_PORT = 8080
+DEFAULT_HTTPS_PORT = 8443
+
+OPENSSL = "/usr/bin/openssl"
+if not os.path.exists(OPENSSL):
+    OPENSSL = os.path.join(os.path.join(os.environ['SNAP_APP_PATH'],
+                                        'usr', 'bin', 'openssl'))
+
+
+class SimpleConfig:
+    """SimpleConfig is a parser for simple key=value files"""
+
+    def __init__(self):
+        # We use a ordered dict similar to configparser.
+        self.data = collections.OrderedDict()
+
+    def read(self, fn):
+        try:
+            with open(fn, 'r') as f:
+                for line in f:
+                    name, var = line.partition('=')[::2]
+                    name = name.strip()
+                    if name:
+                        self.data[name] = var.strip()
+        except EnvironmentError:
+            pass
+
+    def write(self, f):
+        for k, v in self.data.items():
+            if k:
+                f.write('%s=%s\n' % (k, v))
+
+    def get(self, key, value=''):
+        return self.data.get(key, value)
+
+    def set(self, key, value=''):
+        self.data[key] = value
+
+
+def main():
+    """main is the main function"""
+    args = sys.argv[1:]
+    if args:
+        if args[0] == "update":
+            return run(None, update=True)
+
+    return hook()
+
+
+def hook():
+    """hook reads the config from sys.stdin and applies it"""
+    config_in = yaml.load(sys.stdin)
+    run(config_in)
+
+
+def run(config_in, update=False):
+    """run takes the config_in configuration and applies it"""
+
+    spreed_config = start_config = None
+
+    if config_in:
+        config_out, spreed_config, start_config = set_config(config_in)
+
+    config_out, spreed_config, start_config = \
+        get_config(spreed_config, start_config)
+    if not (os.path.exists(SPREED_WEBRTC_CONFIG_FILE) and
+            os.path.exists(START_CONFIG_FILE)):
+        # Set read configuration, to bring in defaults.
+        config_out, spreed_config, start_config = set_config(config_out)
+        config_in = config_out
+
+    if config_in or update:
+        with open(SPREED_WEBRTC_CONFIG_FILE, 'w') as f:
+            spreed_config.write(f, space_around_delimiters=True)
+        with open(START_CONFIG_FILE, 'w') as f:
+            start_config.write(f)
+
+    yaml.dump(config_out, stream=sys.stdout, default_flow_style=False)
+    sys.exit(0)
+
+
+def exec_cmd_and_get_output(command, **kwargs):
+    """exec_cmd executes a given command as subprocess"""
+    assert isinstance(command, list), 'exec_cmd command must be a list'
+    return subprocess.check_output(command, **kwargs)
+
+
+def get_random_hex(bytes=32):
+    """get_random_hex generates random hex strings with OpenSSL"""
+    return exec_cmd_and_get_output([OPENSSL, "rand", "-hex",
+                                   "%d" % bytes]).strip().decode("UTF-8")
+
+
+def load_config():
+    """load_config loads the configuration from file and
+    return spreed_config and start_config"""
+    spreed_config = configparser.ConfigParser()
+    if os.path.exists(SPREED_WEBRTC_CONFIG_FILE):
+        spreed_config.read(SPREED_WEBRTC_CONFIG_FILE)
+    else:
+        spreed_config.read(SPREED_WEBRTC_CONFIG_FILE_IN)
+        # Add our defaults.
+        try:
+            spreed_config.remove_option('http', 'listen')
+        except configparser.NoSectionError:
+            pass
+        spreed_config['http']['root'] = 'www'  # Will be replaced on start.
+        spreed_config['https']['listen'] = ':%s' % DEFAULT_HTTPS_PORT
+        spreed_config['https']['certificate'] = 'tls.crt'
+        spreed_config['https']['key'] = 'tls.key'
+        spreed_config['https']['minVersion'] = 'TLSv1'
+        spreed_config['app']['sessionSecret'] = get_random_hex(64)
+        spreed_config['app']['encryptionSecret'] = get_random_hex(32)
+        spreed_config['app']['serverToken'] = get_random_hex(16)
+    start_config = SimpleConfig()
+    if os.path.exists(START_CONFIG_FILE):
+        start_config.read(START_CONFIG_FILE)
+    else:
+        # Add our defaults.
+        start_config.set("REDIRECTOR_PORT", DEFAULT_REDIRECTOR_PORT)
+        start_config.set("WEBAPP_PORT", DEFAULT_HTTPS_PORT)
+    return spreed_config, start_config
+
+
+def set_config(config_yaml):
+    """set_config sets a configuration and returns config,
+    spreed_config and start_config"""
+
+    config = config_yaml['config']['spreed-webrtc']
+
+    app = config.get('app', {})
+    http = config.get('http', {})
+    https = config.get('https', {})
+    ports = config.get('ports', {})
+
+    spreed_config, start_config = load_config()
+
+    # set value
+    def sv(section, name, value):
+        if not spreed_config.has_section(section):
+            spreed_config.add_section(section)
+        spreed_config[section][name] = value
+
+    # get value
+    def gv(section, name, value=None):
+        if spreed_config.has_section(section):
+            return spreed_config[section].get(name, value)
+        return value
+
+    # from yaml to ini
+    def tc(section, name):
+        c = config.get(section, {})
+        if name in c:
+            sv(section, name, c[name])
+
+    tc('app', 'title')
+    tc('app', 'globalRoom')
+    tc('app', 'defaultRoomEnabled')
+    tc('app', 'serverRealm')
+    tc('app', 'contentSecurityPolicy')
+
+    tc('https', 'minVersion')
+
+    ports_internal = ports.get('internal', {})
+    ports_external = ports.get('external', {})
+
+    http_reverse = http.get('reverse', gv('http', 'listen') and True)
+    http_ui = http.get('ui', start_config.get('REDIRECTOR_PORT') and True)
+    https_enabled = https.get('enabled', gv('https', 'listen') and True)
+
+    if http_reverse:
+        port = DEFAULT_REVERSE_PORT
+        if 'reverse' in ports_internal:
+            port = int(ports_internal['reverse']['port'])
+        listen = "127.0.0.1:%s" % port
+        sv('http', 'listen', listen)
+    else:
+        try:
+            spreed_config.remove_option('http', 'listen')
+        except configparser.NoSectionError:
+            pass
+
+    if http_ui:
+        port = DEFAULT_REDIRECTOR_PORT
+        if 'ui' in ports_external:
+            port = int(ports_external['ui']['port'])
+        start_config.set('REDIRECTOR_PORT', port)
+    else:
+        start_config.set('REDIRECTOR_PORT', '')
+
+    if https_enabled:
+        port = DEFAULT_HTTPS_PORT
+        if 'webapp' in ports_external:
+            port = int(ports_external['webapp']['port'])
+        listen = ":%s" % port
+        sv('https', 'listen', listen)
+        sv('https', 'https', 'on')
+        start_config.set('WEBAPP_PORT', port)
+    else:
+        try:
+            spreed_config.remove_option('https', 'listen')
+        except configparser.NoSectionError:
+            pass
+        sv('https', 'https', 'off')
+
+    config_out = {
+        'config': {
+            'spreed-webrtc': config
+        }
+    }
+    return config_out, spreed_config, start_config
+
+
+def get_config(spreed_config, start_config):
+    """get_config returns config with the current configuration,
+    spreed_config and start_config"""
+
+    config = {}
+    app = config.setdefault('app', {})
+    http = config.setdefault('http', {})
+    https = config.setdefault('https', {})
+    ports = {}
+
+    if not spreed_config or not start_config:
+        spreed_config, start_config = load_config()
+
+    # from ini to yaml
+    def tc(section, name):
+        c = config.setdefault(section, {})
+        try:
+            c[name] = spreed_config[section][name]
+        except KeyError:
+            pass
+
+    tc('app', 'title')
+    tc('app', 'defaultRoomEnabled')
+    tc('app', 'globalRoom')
+    tc('app', 'defaultRoomEnabled')
+    tc('app', 'serverRealm')
+    tc('app', 'contentSecurityPolicy')
+
+    tc('https', 'minVersion')
+
+    try:
+        http_listen = spreed_config['http'].get('listen', None)
+    except KeyError:
+        http_listen = None
+    if http_listen:
+        port = http_listen.rsplit(":", 1)[1]
+        internal = ports.setdefault('internal', {})
+        internal['reverse'] = {
+            'port': int(port)
+        }
+        http['reverse'] = True
+    else:
+        http['reverse'] = False
+
+    try:
+        https_listen = spreed_config['https'].get('listen', None)
+    except KeyError:
+        https_listen = None
+    if https_listen:
+        port = https_listen.rsplit(":", 1)[1]
+        external = ports.setdefault('external', {})
+        external['webapp'] = {
+            'port': int(port)
+        }
+        https['enabled'] = True
+    else:
+        https['enabled'] = False
+
+    redirector_port = start_config.get("REDIRECTOR_PORT",
+                                       DEFAULT_REDIRECTOR_PORT)
+    if redirector_port:
+        http['ui'] = True
+        external = ports.setdefault('external', {})
+        external['ui'] = {
+            'port': int(redirector_port)
+        }
+    else:
+        http['ui'] = False
+
+    if ports:
+        config['ports'] = ports
+
+    config_out = {
+        'config': {
+            'spreed-webrtc': config
+        }
+    }
+    return config_out, spreed_config, start_config
+
+if __name__ == '__main__':
+    try:
+        main()
+    except KeyboardInterrupt:
+        pass
diff --git a/redirector b/redirector
new file mode 100755
index 0000000..0b5383d
--- /dev/null
+++ b/redirector
@@ -0,0 +1,74 @@
+#!/usr/bin/python3
+
+import argparse
+import http.server
+import socketserver
+import sys
+
+
+class RedirectHandler(http.server.BaseHTTPRequestHandler):
+
+    def do_HEAD(self):
+
+        host = self.headers.get('Host')
+        if not host:
+            self.send_response_only(400)
+        else:
+            host = host.split(':', 1)[0]
+            scheme = self.server.redirect_target_scheme
+            port = self.server.redirect_target_port
+
+            self.send_response_only(301)
+            self.send_header('Location', "%s://%s%s" % (scheme, host, port))
+
+        self.send_header('Date', self.date_time_string())
+        self.end_headers()
+
+    def do_GET(self):
+        self.do_HEAD()
+
+    def log_message(self, format, *args):
+        return
+
+
+class Server(socketserver.TCPServer):
+    allow_reuse_address = True
+
+    redirect_target_scheme = 'https'
+    redirect_target_port = ''
+
+    def setup(self, https=True, target=8443):
+        self.redirect_target_scheme = https and 'https' or 'http'
+        if (https and target != 443) or (not https and target != 80):
+            self.redirect_target_port = ":%s" % target
+
+
+def main(port=8000, bind="", https=True, target=8443):
+    """Main runner."""
+    server_address = (bind, port)
+
+    httpd = Server(server_address, RedirectHandler)
+    httpd.setup(https=https, target=target)
+
+    try:
+        httpd.serve_forever()
+    except KeyboardInterrupt:
+        httpd.server_close()
+        sys.exit(0)
+
+if __name__ == "__main__":
+    parser = argparse.ArgumentParser()
+    parser.add_argument('--http', action='store_true',
+                        help='Redirect to http [default: https]')
+    parser.add_argument('--bind', '-b', default='', metavar='ADDRESS',
+                        help='Specify alternate bind address '
+                             '[default: all interfaces]')
+    parser.add_argument('--port', action='store',
+                        default=8000, type=int,
+                        help='Specify alternate bind port [default: 8000]')
+    parser.add_argument('target', action='store',
+                        default=8443, type=int, metavar='TARGET_PORT',
+                        help='Redirect target port [default: 8443]')
+    args = parser.parse_args()
+    main(port=args.port, bind=args.bind, https=not args.http,
+         target=args.target)
diff --git a/server.conf.in b/server.conf.in
new file mode 100644
index 0000000..b57031a
--- /dev/null
+++ b/server.conf.in
@@ -0,0 +1,196 @@
+; Spreed WebRTC server example configuration
+
+[http]
+; HTTP listener in format ip:port.
+listen = 127.0.0.1:8080
+; Full path to directory where to find the server web assets.
+;root = /usr/share/spreed-webrtc-server/www
+; HTTP socket read timeout in seconds.
+;readtimeout = 10
+; HTTP socket write timeout in seconds.
+;writetimeout = 10
+; Use basePath if the server does not run on the root path (/) of your server.
+;basePath = /some/sub/path/
+; Set maximum number of open files (only works when run as root).
+;maxfd = 32768
+; Enable stats API /api/v1/stats for debugging (not for production use!).
+;stats = false
+; Enable HTTP listener for golang pprof module. See
+; http://golang.org/pkg/net/http/pprof/ for details.
+;pprofListen = 127.0.0.1:6060
+
+[https]
+; Native HTTPS listener in format ip:port.
+;listen = 127.0.0.1:8443
+; Full path to PEM encoded certificate chain.
+;certificate = server.crt
+; Full path to PEM encoded private key.
+;key = server.key
+; Mimimal supported encryption standard (SSLv3, TLSv1, TLSv1.1 or TLSv1.2).
+;minVersion = SSLv3
+; HTTPS socket read timeout in seconds.
+;readtimeout = 10
+; HTTPS socket write timeout in seconds.
+;writetimeout = 10
+
+[app]
+; HTML page title
+;title = Spreed WebRTC
+; Version string to use for static resources. This defaults to the server
+; version and should only be changed when you use your own way to invalidate
+; long cached static resources.
+;ver = 1234
+; STUN server URIs in format host:port. You can provide multiple seperated by
+; space. If you do not have one use a public one like stun.spreed.me:443. If
+; you have a TURN server you do not need to set an STUN server as the TURN
+; server will provide STUN services.
+;stunURIs = stun:stun.spreed.me:443
+; TURN server URIs in format host:port?transport=udp|tcp. You can provide
+; multiple seperated by space. If you do not have at least one TURN server then
+; some users will not be able to use the server as the peer to peer connection
+; cannot be established without a TURN server due to firewall reasons. An open
+; source TURN server which is fully supported can be found at
+; https://code.google.com/p/rfc5766-turn-server/.
+;turnURIs = turn:turnserver:port?transport=udp
+; Shared secret authentication for TURN user generation if the TURN server is
+; protected (which it should be).
+; See http://tools.ietf.org/html/draft-uberti-behave-turn-rest-00 for details.
+; A supported TURN server is https://code.google.com/p/rfc5766-turn-server/.
+;turnSecret = the-default-turn-shared-secret-do-not-keep
+; Enable renegotiation support. Set to true to tell clients that they can
+; renegotiate peer connections when required. Firefox support is not complete,
+; so do not enable if you want compatibility with Firefox clients.
+;renegotiation = false
+; Session secret to use for session id generator. 32 or 64 bytes of random data
+; are recommented (hex encoded). A warning will be logged if hex decode fails.
+; You can generate a secret easily with "xxd -ps -l 32 -c 32 /dev/random".
+sessionSecret = the-default-secret-do-not-keep-me
+; Encryption secret protecting the data in generated server side tokens. Use
+; 16, 24, or 32 bytes (hex encoded) to select AES-128, AES-192, or AES-256.
+; When you change the encryption secret, stored authentications, sessions and
+; contacts become invalid. A warning will be logged if hex decode fails. You
+; can generate a secret easily with "xxd -ps -l 32 -c 32 /dev/random".
+encryptionSecret = tne-default-encryption-block-key
+; Full path to a text file containig client tokens which a user needs to enter
+; when accessing the web client. Each line in this file represents a valid
+; token.
+;tokenFile = tokens.txt
+; The name of a global room. If enabled it should be kept secret. Users in that
+; room are visible in all other rooms.
+;globalRoom = global
+; The default room is the room at the root URL of the servers base address and
+; all users will join this room if enabled. If it is disabled then a room join
+; form will be shown instead.
+;defaultRoomEnabled = true
+; Whether a user account is required to join a room. This only has an effect
+; if user accounts are enabled. Optional, defaults to false.
+;authorizeRoomJoin = false
+; Whether a user account is required to create a room. This only has an effect
+; if user accounts are enabled. Optional, defaults to false.
+;authorizeRoomCreation = false
+; Server token is a public random string which is used to enhance security of
+; server generated security tokens. When the serverToken is changed all existing
+; nonces become invalid. Use 32 or 64 characters (eg. 16 or 32 byte hex).
+serverToken = i-did-not-change-the-public-token-boo
+; The server realm is part of the validation chain of tokens and nonces and is
+; added as suffix to server created user ids if user creation is enabled. When
+; the realm is changed, all existing tokens and nonces become invalid.
+serverRealm = local
+; Full path to an extra templates directory. Templates in this directory ending
+; with .html will be parsed on startup and can be used to fill the supported
+; extra-* template slots. If the extra folder has a sub folder "static", the
+; resources in this static folder will be available as /extra/static/filename
+; relative to your servers base URL.
+;extra = /usr/share/spreed-webrtc-server/extra
+; URL relative to the servers base path for a plugin javascript file which is
+; automatically loaded on web client start for all users. You can put your
+; plugin in the extra/static folder (see above) or provide another folder using
+; a front end webserver. Check the doc folder for more info about plugins and
+; examples.
+;plugin = extra/static/myplugin.js
+; Content-Security-Policy HTTP response header value.
+; Spreed WebRTC requires inline styles, WebSocket connection to itself and
+; data: URL for images.
+; The currently recommended CSP is:
+;   default-src 'self';
+;   frame-src 'self' blob:;
+;   style-src 'self' 'unsafe-inline';
+;   img-src 'self' data: blob:;
+;   connect-src 'self' wss://server:port/ws blob:;
+;   font-src 'self' data: blob:;
+;   media-src 'self' blob:;
+;contentSecurityPolicy =
+; Content-Security-Policy-Report-Only HTTP response header value. Use this
+; to test your CSP before putting it into production.
+;contentSecurityPolicyReportOnly =
+
+[modules]
+; Modules provide optional functionality. Modules are enabled by default and
+; can be disabled by setting false to their corresponding configuration.
+;screensharing = true
+;youtube = true
+;presentation = true
+;contacts = true
+
+[log]
+;logfile = /var/log/spreed-webrtc-server.log
+
+[users]
+; Set to true to enable user functionality.
+enabled = false
+; Set users authorization mode.
+; sharedsecret:
+;   Validates the userid with a HMAC authentication secret.
+;   The format goes like this:
+;     BASE64(HMAC-SHA-256(secret, expirationTimestampInSeconds:userid))
+; httpheader:
+;   The userid is provided as an HTTP header. The server does not do any
+;   validation. This usually only makes sense with a front end HTTPS proxy which
+;   does the authentication and injects the user id as HTTP header for sessions
+;   REST requests. In mode httpheader, allowRegistration should be false.
+; certificate:
+;   The userid is provided as CommonName with a certificate provided with TLS
+;   client authentication. When you use this with a front end proxy for TLS
+;   termination, that proxy has to validate the certificate and inject certain
+;   headers into the proxy connection. In certificate mode the server can act as
+;   a signing CA to sign incoming user certificate requests with a private key
+;   when allowRegistration is true. While certificate mode offers the highest
+;   security it is currently considered experimental and the user experience
+;   varies between browsers and platforms.
+;mode = sharedsecret
+; The shared secred for HMAC validation in "sharedsecret" mode. Best use 32 or
+; 64 bytes of random data.
+;sharedsecret_secret = some-secret-do-not-keep
+; The HTTP header name where to find the userid in "httpheader" mode.
+;httpheader_header = x-userid
+; Full path to PEM encoded private key to use for user creation in "certificate"
+; mode. Keep this commented if you do not want the server to sign certificate
+; requests.
+;certificate_key = userskey.key
+; Full path to PEM encoded certificate to use for user validation in
+; "certificate" mode. When allowRegistration is true and certificate_key is also
+; set then the server will act as a CA and sign incoming user registrations and
+; return certificates to users as registration.
+;certificate_certificate = usersca.crt
+; The HTTP header name where to find if the TLS client authentication was
+; successfull. The value of this header is matched to
+; certificate_verifiedHeaderValue and only if there is a match, the proxy
+; handled TLS client authentication is accepted as success. Make sure to secure
+; these headers with your front end proxy (always set them). Do not use these
+; settings when not using a front end proxy.
+;certificate_verifiedHeader = x-verified
+;certificate_verifiedHeaderValue = SUCCESS
+; The HTTP header name where to find the PEM encoded certificate authenticated
+; by a front end proxy. With Nginx the required value is in $ssl_client_cert.
+;certificate_certificateHeader = x-certificate
+; The valid duration of generated certificates created in certificate mode when
+; allowRegistration is enabled.
+;certificate_validForDays = 365
+; Organization to set into the created user certificates. Use a readable public
+; name to make the certificate easily recognizable as certificate for your
+; server so users can choose the correct certificate when prompted.
+;certificate_organization= = My Spreed Server
+; If enabled the server can create new userids. Set allowRegistration to true to
+; enable userid creation/registration. Users are created according the settings
+; of the currently configured mode (see above).
+;allowRegistration = false
diff --git a/snapcraft.yaml b/snapcraft.yaml
new file mode 100644
index 0000000..6f81a6e
--- /dev/null
+++ b/snapcraft.yaml
@@ -0,0 +1,37 @@
+name: spreed-webrtc
+version: 0.24.11-1
+summary: WebRTC audio/video calls and conferences
+description: Spreed WebRTC implements a WebRTC audio/video call and conferencing server and web client
+icon: spreedWaves.svg
+
+apps:
+  spreed-webrtc:
+    command: bin/start
+    daemon: simple
+    uses: [listener-service]
+
+uses:
+  listener-service:
+    type: migration-skill
+    caps: [network-listener, network-service]
+
+config: bin/config
+
+parts:
+  spreed:
+    plugin: autotools
+    source: https://github.com/strukturag/spreed-webrtc
+    source-type: git
+    source-branch: develop
+    build-packages: [golang-go, nodejs]
+  glue:
+    plugin: copy
+    files:
+      start: bin/start
+      ssleay.cnf: ssleay.cnf
+      redirector: bin/redirector
+  config:
+    plugin: copy
+    files:
+      config.py: bin/config
+      server.conf.in: server.conf.in
diff --git a/spreedWaves.svg b/spreedWaves.svg
new file mode 100644
index 0000000..a9e6bbf
--- /dev/null
+++ b/spreedWaves.svg
@@ -0,0 +1,113 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+   xmlns:dc="http://purl.org/dc/elements/1.1/"
+   xmlns:cc="http://creativecommons.org/ns#"
+   xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+   xmlns:svg="http://www.w3.org/2000/svg"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   id="svg2"
+   version="1.1"
+   inkscape:version="0.48.3.1 r9886"
+   width="256"
+   height="256"
+   xml:space="preserve"
+   sodipodi:docname="spreedWaves.svg"
+   inkscape:export-filename="/home/domain/longsleep/Desktop/spreedio/spreed_waves_big.png"
+   inkscape:export-xdpi="394.16"
+   inkscape:export-ydpi="394.16"><metadata
+     id="metadata8"><rdf:RDF><cc:Work
+         rdf:about=""><dc:format>image/svg+xml</dc:format><dc:type
+           rdf:resource="http://purl.org/dc/dcmitype/StillImage" /><dc:title></dc:title></cc:Work></rdf:RDF></metadata><defs
+     id="defs6"><clipPath
+   clipPathUnits="userSpaceOnUse"
+   id="clipPath18"><path
+     d="m 0,0 5244,0 0,1870.87 -5244,0 L 0,0 z"
+     id="path20"
+     inkscape:connector-curvature="0" /></clipPath>
+</defs><sodipodi:namedview
+     pagecolor="#ffffff"
+     bordercolor="#666666"
+     borderopacity="1"
+     objecttolerance="10"
+     gridtolerance="10"
+     guidetolerance="10"
+     inkscape:pageopacity="0"
+     inkscape:pageshadow="2"
+     inkscape:window-width="1265"
+     inkscape:window-height="752"
+     id="namedview4"
+     showgrid="true"
+     showguides="false"
+     inkscape:guide-bbox="true"
+     fit-margin-top="0"
+     fit-margin-left="0"
+     fit-margin-right="0"
+     fit-margin-bottom="0"
+     borderlayer="false"
+     showborder="true"
+     inkscape:showpageshadow="true"
+     inkscape:zoom="2"
+     inkscape:cx="126.78497"
+     inkscape:cy="108.23884"
+     inkscape:window-x="986"
+     inkscape:window-y="262"
+     inkscape:window-maximized="0"
+     inkscape:current-layer="g10"
+     inkscape:snap-from-guide="true"
+     width="512px"><sodipodi:guide
+       position="0.00032359136,-108.69241"
+       orientation="0,855.51001"
+       id="guide3801" /><sodipodi:guide
+       position="855.51034,-108.69241"
+       orientation="-233.8625,0"
+       id="guide3803" /><sodipodi:guide
+       position="-6.5,126.31141"
+       orientation="0,-855.51001"
+       id="guide3805" /><sodipodi:guide
+       position="0.00032359136,125.17008"
+       orientation="233.8625,0"
+       id="guide3807" /><sodipodi:guide
+       orientation="0,1"
+       position="-9.5,-0.18859756"
+       id="guide3815" /><sodipodi:guide
+       orientation="1,0"
+       position="146.50049,125.17008"
+       id="guide4561" /></sodipodi:namedview><g
+     id="g10"
+     inkscape:groupmode="layer"
+     inkscape:label="waves"
+     transform="matrix(1.25,0,0,-1.25,3.2359136e-4,364.6925)"
+     style="display:inline"><g
+   transform="matrix(0.1729173,0,0,0.1729173,-5.725502,4.0242789)"
+   id="g16"
+   clip-path="url(#clipPath18)"><path
+     d="m 667.434,1427.23 c 5.625,40.32 50,105 131.25,105 81.25,0 263.75,0 292.496,0 28.75,0 62.5,-6.25 83.75,40 -1.25,-30 -8.75,-130 -11.25,-146.25 -2.5,-16.25 -22.5,-137.5 -136.246,-138.75 -113.75,0 -297.5,0 -297.5,0 0,0 -58.75,6.88 -88.438,-46.25 -0.191,-0.39 20.938,152.5 25.938,186.25"
+     style="fill:#009534;fill-opacity:1;fill-rule:nonzero;stroke:none"
+     id="path22"
+     inkscape:connector-curvature="0" /><path
+     d="m 135.7852,939.398 c 11.2304,81.493 99.8238,212.27 262.0348,212.27 162.215,0 526.571,0 583.969,0 57.399,0 124.781,-12.637 167.201,80.862 -2.49,-60.647 -17.47,-262.811 -22.46,-295.659 -4.99,-32.851 -44.92,-277.973 -272.014,-280.5 -227.098,0 -593.95,0 -593.95,0 0,0 -118.9879,13.098 -176.5621,-93.5 -0.3828,-0.801 41.8008,308.301 51.7813,376.527"
+     style="fill:#84b819;fill-opacity:1;fill-rule:nonzero;stroke:none"
+     id="path24"
+     inkscape:connector-curvature="0" /></g><text
+   transform="scale(1,-1)"
+   sodipodi:linespacing="125%"
+   id="text3013"
+   y="-87.199997"
+   x="580"
+   style="font-size:9.60000038px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+   xml:space="preserve"><tspan
+     y="-87.199997"
+     x="580"
+     id="tspan3015"
+     sodipodi:role="line" /></text>
+
+
+<g
+   inkscape:groupmode="layer"
+   id="layer2"
+   inkscape:label="mask"
+   style="display:inline" /></g></svg>
\ No newline at end of file
diff --git a/ssleay.cnf b/ssleay.cnf
new file mode 100644
index 0000000..09c79a2
--- /dev/null
+++ b/ssleay.cnf
@@ -0,0 +1,22 @@
+#
+# SSLeay configuration for Spreed WebRTC.
+#
+
+RANDFILE                = /dev/urandom
+
+[ req ]
+default_bits            = 2048
+default_md              = sha256
+default_keyfile         = privkey.pem
+distinguished_name      = req_distinguished_name
+prompt                  = no
+policy                  = policy_anything
+req_extensions          = req_v3
+
+[ req_v3 ]
+basicConstraints        = CA:FALSE
+keyUsage                = nonRepudiation, digitalSignature, keyEncipherment
+
+[ req_distinguished_name ]
+commonName              = spreed-webrtc
+
diff --git a/start b/start
new file mode 100755
index 0000000..3c094f1
--- /dev/null
+++ b/start
@@ -0,0 +1,93 @@
+#!/bin/sh
+
+set -e
+umask 027
+
+SERVER_CONF="$SNAP_APP_DATA_PATH/server.conf"
+START_CONF="$SNAP_APP_DATA_PATH/start.conf"
+CONFIG_MARK="$SNAP_APP_DATA_PATH/version.2"
+
+SPREED_WEBRTC_PID=
+REDIRECTOR_PID=
+
+TLS_KEY="$SNAP_APP_DATA_PATH/tls.key"
+TLS_CERT="$SNAP_APP_DATA_PATH/tls.crt"
+
+TLS_DAYS=3650
+TLS_BITS=2048
+
+OPENSSL="/usr/bin/openssl"
+RANDFILE="$SNAP_APP_DATA_PATH/.rnd"
+export RANDFILE
+
+cleanup () {
+	trap "" EXIT
+	echo "Stopping ..."
+	if [ -n "$REDIRECTOR_PID" ]; then
+		kill -TERM $REDIRECTOR_PID 2>/dev/null
+	fi
+	if [ -n "$SPREED_WEBRTC_PID" ]; then
+		kill -TERM $SPREED_WEBRTC_PID 2>/dev/null
+	fi
+	rm -f "$SNAP_APP_TMPDIR/spreed-webrtc.conf"
+	echo "Done."
+}
+trap "cleanup" INT QUIT TERM EXIT
+
+config () {
+	if [ ! -e "$START_CONF" -o ! -e "$SERVER_CONF" -o ! -e "$CONFIG_MARK" ]; then
+		echo "Updating configuraion ..."
+		"$SNAP_APP_PATH/bin/config" update >/dev/null
+		touch "$CONFIG_MARK"
+	fi
+	if [ -e "$START_CONF" ]; then
+		. "$START_CONF"
+	fi
+}
+
+make_tls_key_and_cert () {
+	if grep -Fxq "https = off" "$SERVER_CONF"; then
+		return
+	fi
+	if [ ! -e "$TLS_CERT" ]; then
+		# Create self signed TLS certificate.
+		rm -f "$TLS_KEY"
+		$OPENSSL req -new -x509 -nodes -newkey rsa:$TLS_BITS \
+			-keyout "$TLS_KEY" \
+			-out "$TLS_CERT" -days $TLS_DAYS \
+			-config "$SNAP_APP_PATH/ssleay.cnf" -sha256 -extensions req_v3
+	fi
+}
+
+# Create random strings.
+#sessionSecret=$($OPENSSL rand -hex 32)
+#encryptionSecret=$($OPENSSL rand -hex 24)
+#serverToken=$($OPENSSL rand -hex 16)
+
+spreed_webrtc () {
+	# Create runtime configuration.
+	sed "\
+	s|root = .*|root = $SNAP_APP_PATH/share/spreed-webrtc-server/www|; \
+	s|key = .*|key = $TLS_KEY|; \
+	s|certificate = .*|certificate = $TLS_CERT|; \
+	" $SERVER_CONF > "$SNAP_APP_TMPDIR/spreed-webrtc.conf"
+
+	"$SNAP_APP_PATH/sbin/spreed-webrtc-server" -c "$SNAP_APP_TMPDIR/spreed-webrtc.conf" &
+	SPREED_WEBRTC_PID=$!
+}
+
+redirector () {
+	if [ -z "$REDIRECTOR_PORT" -o -z "$WEBAPP_PORT" ]; then
+		return
+	fi
+	"$SNAP_APP_PATH/bin/redirector" --port $REDIRECTOR_PORT $WEBAPP_PORT &
+	REDIRECTOR_PID=$!
+}
+
+make_tls_key_and_cert
+config
+redirector
+spreed_webrtc
+
+echo "Running $SPREED_WEBRTC_PID ..."
+wait $SPREED_WEBRTC_PID