diff --git a/debian/acmeserver.default b/debian/acmeserver.default
new file mode 100644
index 0000000000000000000000000000000000000000..8536d1352c917777d87a51ff0db887ffbec3f839
--- /dev/null
+++ b/debian/acmeserver.default
@@ -0,0 +1 @@
+ADDR=:5004
diff --git a/debian/acmeserver.service b/debian/acmeserver.service
new file mode 100644
index 0000000000000000000000000000000000000000..bc7317463c5dfa7570c1488d8854e1edebc71a3b
--- /dev/null
+++ b/debian/acmeserver.service
@@ -0,0 +1,23 @@
+[Unit]
+Description=ACMEserver
+After=network.target
+
+[Service]
+User=acmeserver
+Group=acmeserver
+EnvironmentFile=-/etc/default/acmeserver
+ExecStart=/usr/bin/acmeserver --addr $ADDR
+Restart=always
+
+# Hardening
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectHome=yes
+ProtectSystem=full
+ReadOnlyDirectories=/
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+
+[Install]
+WantedBy=multi-user.target
+
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000000000000000000000000000000000000..6ddd715609dd6749ec5498523bd223bb2cb0487d
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,5 @@
+acmeserver (2.0) unstable; urgency=medium
+
+  * Initial Release.
+
+ -- Autistici/Inventati <debian@autistici.org>  Sat, 15 Jun 2018 09:23:40 +0000
diff --git a/debian/compat b/debian/compat
new file mode 100644
index 0000000000000000000000000000000000000000..f599e28b8ab0d8c9c57a486c89c4a5132dcbd3b2
--- /dev/null
+++ b/debian/compat
@@ -0,0 +1 @@
+10
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000000000000000000000000000000000000..22160a54f116460fa62d9e07b9ec0f0a7ac7b535
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,13 @@
+Source: acmeserver
+Section: admin
+Priority: optional
+Maintainer: Autistici/Inventati <debian@autistici.org>
+Build-Depends: debhelper (>=9), golang-go, dh-systemd, dh-golang
+Standards-Version: 3.9.6
+
+Package: acmeserver
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: ACME server
+ Automatically manages and renews public SSL certificates.
+
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000000000000000000000000000000000000..f268beb0ca82d99554bca88682adfa6854bab979
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,25 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: acmeserver
+Source: <https://git.autistici.org/ai3/acmeserver>
+
+Files: *
+Copyright: 2018 Autistici/Inventati <info@autistici.org>
+License: GPL-3.0+
+
+License: GPL-3.0+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ .
+ This package is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <https://www.gnu.org/licenses/>.
+ .
+ On Debian systems, the complete text of the GNU General
+ Public License version 3 can be found in "/usr/share/common-licenses/GPL-3".
+
diff --git a/debian/postinst b/debian/postinst
new file mode 100755
index 0000000000000000000000000000000000000000..9766d93c974d0a6469e2b12329f3884f8f4d1998
--- /dev/null
+++ b/debian/postinst
@@ -0,0 +1,16 @@
+#!/bin/sh
+
+set -e
+
+case "$1" in
+configure)
+    addgroup --system --quiet acmeserver
+    adduser --system --no-create-home --home /run/acmeserver \
+      --disabled-password --disabled-login \
+      --quiet --ingroup acmeserver acmeserver
+    ;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000000000000000000000000000000000000..f0ecee87f6b1e6104872261ec660b391bbc5a25d
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,19 @@
+#!/usr/bin/make -f
+
+export DH_GOPKG = git.autistici.org/ai3/acmeserver
+export DH_GOLANG_EXCLUDES = vendor
+
+
+%:
+	dh $@ --with systemd --with golang --buildsystem golang
+
+override_dh_install:
+	rm -fr $(CURDIR)/debian/acmeserver/usr/share/gocode
+	dh_install
+
+override_dh_systemd_enable:
+	dh_systemd_enable --no-enable
+
+override_dh_systemd_start:
+	dh_systemd_start --no-start
+
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000000000000000000000000000000000000..89ae9db8f88b823b6a7eabf55e203658739da122
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (native)