diff --git a/doc/_index.html b/doc/_index.html
index c9497da..07945c3 100644
--- a/doc/_index.html
+++ b/doc/_index.html
@@ -93,11 +93,6 @@
       
             </li>
     
-            <li>
-      <span class='object_link'><a href="puppet_classes/confdroid_gitea_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_gitea::main::install (puppet_class)">confdroid_gitea::main::install</a></span>
-      
-            </li>
-    
             <li>
       <span class='object_link'><a href="puppet_classes/confdroid_gitea_3A_3Amain_3A_3Aservice.html" title="puppet_classes::confdroid_gitea::main::service (puppet_class)">confdroid_gitea::main::service</a></span>
       
diff --git a/doc/file.README.html b/doc/file.README.html
index 7f57e67..db157e0 100644
--- a/doc/file.README.html
+++ b/doc/file.README.html
@@ -84,6 +84,8 @@
 
 <p>Configuration</p>
 <ul><li>
+<p>install required system user</p>
+</li><li>
 <p>manage directory structure</p>
 </li><li>
 <p>manage configuration files</p>
diff --git a/doc/index.html b/doc/index.html
index 6232a9a..e30c657 100644
--- a/doc/index.html
+++ b/doc/index.html
@@ -84,6 +84,8 @@
 
 <p>Configuration</p>
 <ul><li>
+<p>install required system user</p>
+</li><li>
 <p>manage directory structure</p>
 </li><li>
 <p>manage configuration files</p>
diff --git a/doc/puppet_class_list.html b/doc/puppet_class_list.html
index 7db4413..caf7c71 100644
--- a/doc/puppet_class_list.html
+++ b/doc/puppet_class_list.html
@@ -71,28 +71,21 @@
     </li>
     
 
-    <li id="object_puppet_classes::confdroid_gitea::main::install" class="even">
-      <div class="item">
-        <span class='object_link'><a href="puppet_classes/confdroid_gitea_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_gitea::main::install (puppet_class)">confdroid_gitea::main::install</a></span>
-      </div>
-    </li>
-    
-
-    <li id="object_puppet_classes::confdroid_gitea::main::service" class="odd">
+    <li id="object_puppet_classes::confdroid_gitea::main::service" class="even">
       <div class="item">
         <span class='object_link'><a href="puppet_classes/confdroid_gitea_3A_3Amain_3A_3Aservice.html" title="puppet_classes::confdroid_gitea::main::service (puppet_class)">confdroid_gitea::main::service</a></span>
       </div>
     </li>
     
 
-    <li id="object_puppet_classes::confdroid_gitea::main::user" class="even">
+    <li id="object_puppet_classes::confdroid_gitea::main::user" class="odd">
       <div class="item">
         <span class='object_link'><a href="puppet_classes/confdroid_gitea_3A_3Amain_3A_3Auser.html" title="puppet_classes::confdroid_gitea::main::user (puppet_class)">confdroid_gitea::main::user</a></span>
       </div>
     </li>
     
 
-    <li id="object_puppet_classes::confdroid_gitea::params" class="odd">
+    <li id="object_puppet_classes::confdroid_gitea::params" class="even">
       <div class="item">
         <span class='object_link'><a href="puppet_classes/confdroid_gitea_3A_3Aparams.html" title="puppet_classes::confdroid_gitea::params (puppet_class)">confdroid_gitea::params</a></span>
       </div>
diff --git a/doc/puppet_classes/confdroid_gitea_3A_3Afirewall_3A_3Aiptables.html b/doc/puppet_classes/confdroid_gitea_3A_3Afirewall_3A_3Aiptables.html
index 149327c..f20c6af 100644
--- a/doc/puppet_classes/confdroid_gitea_3A_3Afirewall_3A_3Aiptables.html
+++ b/doc/puppet_classes/confdroid_gitea_3A_3Afirewall_3A_3Aiptables.html
@@ -124,7 +124,7 @@
 class confdroid_gitea::firewall::iptables (
 
 ) inherits confdroid_gitea::params {
-  if $ga_use_firewall == true {
+  if ($ga_use_firewall == true) and ($ga_host_fqdn == $fqdn) {
     firewall { &quot;${ga_order_prefix}${ga_http_port} allow gitea http port ${ga_http_port}&quot;:
       proto =&gt; &#39;tcp&#39;,
       dport =&gt; $ga_http_port,
diff --git a/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Adirs.html b/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Adirs.html
index 0e58c7a..4f97e3a 100644
--- a/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Adirs.html
+++ b/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Adirs.html
@@ -113,7 +113,7 @@
 class confdroid_gitea::main::dirs (
 
 ) inherits confdroid_gitea::params {
-  require confdroid_gitea::main::files
+  require confdroid_gitea::main::user
 }</pre>
       </td>
     </tr>
diff --git a/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Afiles.html b/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Afiles.html
index 4ae76f2..1e35cec 100644
--- a/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Afiles.html
+++ b/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Afiles.html
@@ -105,7 +105,17 @@
 7
 8
 9
-10</pre>
+10
+11
+12
+13
+14
+15
+16
+17
+18
+19
+20</pre>
       </td>
       <td>
         <pre class="code"><span class="info file"># File 'manifests/main/files.pp', line 6</span>
@@ -113,7 +123,17 @@
 class confdroid_gitea::main::files (
 
 ) inherits confdroid_gitea::params {
-  require confdroid_gitea::main::user
+  if $ga_host_fqdn == $fqdn {
+    require confdroid_gitea::main::dirs
+
+    file { &quot;${ga_working_dir}/gitea&quot;:
+      ensure =&gt; &#39;file&#39;,
+      mode   =&gt; &#39;0755&#39;,
+      owner  =&gt; $ga_user,
+      group  =&gt; $ga_user,
+      source =&gt; &quot;${ga_dl_url}/gitea/${ga_dl_version}/gitea-${ga_dl_version}-linux-amd64&quot;,
+    }
+  }
 }</pre>
       </td>
     </tr>
diff --git a/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Aservice.html b/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Aservice.html
index 051af29..915f6d6 100644
--- a/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Aservice.html
+++ b/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Aservice.html
@@ -106,7 +106,9 @@
 8
 9
 10
-11</pre>
+11
+12
+13</pre>
       </td>
       <td>
         <pre class="code"><span class="info file"># File 'manifests/main/service.pp', line 6</span>
@@ -114,8 +116,10 @@
 class confdroid_gitea::main::service (
 
 ) inherits confdroid_gitea::params {
-  require confdroid_gitea::firewall::iptables
-  require confdroid_gitea::main::dirs
+  if  $ga_host_fqdn == $fqdn {
+    require confdroid_gitea::firewall::iptables
+    require confdroid_gitea::main::files
+  }
 }</pre>
       </td>
     </tr>
diff --git a/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Auser.html b/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Auser.html
index a023f5e..1c99e2f 100644
--- a/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Auser.html
+++ b/doc/puppet_classes/confdroid_gitea_3A_3Amain_3A_3Auser.html
@@ -105,7 +105,14 @@
 7
 8
 9
-10</pre>
+10
+11
+12
+13
+14
+15
+16
+17</pre>
       </td>
       <td>
         <pre class="code"><span class="info file"># File 'manifests/main/user.pp', line 6</span>
@@ -113,7 +120,14 @@
 class confdroid_gitea::main::user (
 
 ) inherits confdroid_gitea::params {
-  require confdroid_gitea::main::install
+  if $ga_host_fqdn == $fqdn {
+    user { $ga_user:
+      ensure     =&gt; &#39;present&#39;,
+      managehome =&gt; true,
+      shell      =&gt; &#39;/bin/false&#39;,
+      system     =&gt; true,
+    }
+  }
 }</pre>
       </td>
     </tr>
diff --git a/doc/puppet_classes/confdroid_gitea_3A_3Aparams.html b/doc/puppet_classes/confdroid_gitea_3A_3Aparams.html
index e6aa6c2..ea17bf1 100644
--- a/doc/puppet_classes/confdroid_gitea_3A_3Aparams.html
+++ b/doc/puppet_classes/confdroid_gitea_3A_3Aparams.html
@@ -75,8 +75,6 @@
       
       <span class='object_link'><a href="confdroid_gitea_3A_3Amain_3A_3Aconfig.html" title="puppet_classes::confdroid_gitea::main::config (puppet_class)">confdroid_gitea::main::config</a></span><br/>
       
-      <span class='object_link'><a href="confdroid_gitea_3A_3Amain_3A_3Ainstall.html" title="puppet_classes::confdroid_gitea::main::install (puppet_class)">confdroid_gitea::main::install</a></span><br/>
-      
       <span class='object_link'><a href="confdroid_gitea_3A_3Amain_3A_3Aservice.html" title="puppet_classes::confdroid_gitea::main::service (puppet_class)">confdroid_gitea::main::service</a></span><br/>
       
       <span class='object_link'><a href="confdroid_gitea_3A_3Afirewall_3A_3Aiptables.html" title="puppet_classes::confdroid_gitea::firewall::iptables (puppet_class)">confdroid_gitea::firewall::iptables</a></span><br/>
@@ -178,6 +176,96 @@
         &mdash;
         <div class='inline'>
 <p>The order prefix for firewall rules.</p>
+</div>
+      
+    </li>
+  
+    <li>
+      
+        <span class='name'>ga_host_fqdn</span>
+      
+      
+        <span class='type'>(<tt>String</tt>)</span>
+      
+      
+        <em class="default">(defaults to: <tt>&#39;gitea.example.net&#39;</tt>)</em>
+      
+      
+        &mdash;
+        <div class='inline'>
+<p>The FQDN for the Gitea host.</p>
+</div>
+      
+    </li>
+  
+    <li>
+      
+        <span class='name'>ga_working_dir</span>
+      
+      
+        <span class='type'>(<tt>String</tt>)</span>
+      
+      
+        <em class="default">(defaults to: <tt>&#39;/opt/gitea&#39;</tt>)</em>
+      
+      
+        &mdash;
+        <div class='inline'>
+<p>The working directory for Gitea.</p>
+</div>
+      
+    </li>
+  
+    <li>
+      
+        <span class='name'>ga_dl_url</span>
+      
+      
+        <span class='type'>(<tt>String</tt>)</span>
+      
+      
+        <em class="default">(defaults to: <tt>&#39;https://dl.gitea.com/gitea&#39;</tt>)</em>
+      
+      
+        &mdash;
+        <div class='inline'>
+<p>The download URL for Gitea.</p>
+</div>
+      
+    </li>
+  
+    <li>
+      
+        <span class='name'>ga_dl_version</span>
+      
+      
+        <span class='type'>(<tt>String</tt>)</span>
+      
+      
+        <em class="default">(defaults to: <tt>&#39;1.25.4&#39;</tt>)</em>
+      
+      
+        &mdash;
+        <div class='inline'>
+<p>The version of Gitea to download.</p>
+</div>
+      
+    </li>
+  
+    <li>
+      
+        <span class='name'>ga_user</span>
+      
+      
+        <span class='type'>(<tt>String</tt>)</span>
+      
+      
+        <em class="default">(defaults to: <tt>&#39;git&#39;</tt>)</em>
+      
+      
+        &mdash;
+        <div class='inline'>
+<p>The system user for Gitea.</p>
 </div>
       
     </li>
@@ -193,11 +281,6 @@
         <pre class="lines">
 
 
-10
-11
-12
-13
-14
 15
 16
 17
@@ -210,13 +293,32 @@
 24
 25
 26
-27</pre>
+27
+28
+29
+30
+31
+32
+33
+34
+35
+36
+37
+38
+39</pre>
       </td>
       <td>
-        <pre class="code"><span class="info file"># File 'manifests/params.pp', line 10</span>
+        <pre class="code"><span class="info file"># File 'manifests/params.pp', line 15</span>
 
 class confdroid_gitea::params (
 
+  # main
+  String $ga_host_fqdn    = &#39;gitea.example.net&#39;,
+  String $ga_working_dir  = &#39;/opt/gitea&#39;,
+  String $ga_dl_url       = &#39;https://dl.gitea.com/gitea&#39;,
+  String $ga_dl_version   = &#39;1.25.4&#39;,
+  String $ga_user         = &#39;git&#39;,
+
   # firewall
   Boolean $ga_use_firewall  = true,
   String $ga_http_port      = &#39;3000&#39;,