diff --git a/AGENTS.md b/AGENTS.md
index c3d583f..5cbb4b4 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -4,7 +4,7 @@ Guidance for working in this repo.
 
 ## What this is
 
-`bike-admin` is a small single-user web app for logging bike service/repair
+**volundr** (packaged as `bike_admin`) is a small single-user web app for logging bike service/repair
 "events" (type, date, mileage, cost, notes) and seeing per-bike hints: a
 **service-due** status derived from the newest mileage and the most recent
 `service` event, plus **MOT / insurance renewal** statuses derived from the most
diff --git a/README.md b/README.md
index 540074e..b9e9233 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-# bike-admin
+# volundr
 
 A small, secure, single-user web app for logging bike service and repair
 "events" (type, date, mileage, cost, notes) and getting a clear **service-due**
diff --git a/app/__init__.py b/app/__init__.py
index 45cb68a..c663d3f 100644
--- a/app/__init__.py
+++ b/app/__init__.py
@@ -1 +1 @@
-"""bike-admin package."""
+"""volundr package."""
diff --git a/app/main.py b/app/main.py
index 9109c83..74e86e4 100644
--- a/app/main.py
+++ b/app/main.py
@@ -215,7 +215,7 @@ async def lifespan(_: FastAPI):
     yield
 
 
-app = FastAPI(title="bike-admin", lifespan=lifespan)
+app = FastAPI(title="volundr", lifespan=lifespan)
 
 
 @app.exception_handler(FastAPIUnauthorized)
diff --git a/app/templates/base.html b/app/templates/base.html
index c4b751c..a7fd6fb 100644
--- a/app/templates/base.html
+++ b/app/templates/base.html
@@ -3,14 +3,14 @@
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<title>{% block title %}bike-admin{% endblock %}</title>
+<title>{% block title %}volundr{% endblock %}</title>
 <link rel="icon" href="/static/favicon.svg" type="image/svg+xml">
 <link rel="stylesheet" href="/static/main.css">
 <script src="/static/htmx.min.js" defer></script>
 </head>
 <body>
 <header class="topbar">
-  <a class="brand" href="/">bike-admin</a>
+  <a class="brand" href="/">volundr</a>
   <nav class="nav">
     <a href="/bikes/new" class="btn btn-primary">+ Bike</a>
     <a href="/logout"
diff --git a/app/templates/bikes/detail.html b/app/templates/bikes/detail.html
index 24d2e61..c0b495b 100644
--- a/app/templates/bikes/detail.html
+++ b/app/templates/bikes/detail.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}{{ bike.name }} - bike-admin{% endblock %}
+{% block title %}{{ bike.name }} - volundr{% endblock %}
 {% block content %}
 <div class="page-head">
   <h1>{{ bike.name }}</h1>
diff --git a/app/templates/bikes/edit.html b/app/templates/bikes/edit.html
index df3382a..4aeec47 100644
--- a/app/templates/bikes/edit.html
+++ b/app/templates/bikes/edit.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}Edit bike - bike-admin{% endblock %}
+{% block title %}Edit bike - volundr{% endblock %}
 {% block content %}
 <div class="page-head"><h1>Edit {{ bike.name }}</h1></div>
 <div class="card">
diff --git a/app/templates/bikes/new.html b/app/templates/bikes/new.html
index 353199c..51d2c12 100644
--- a/app/templates/bikes/new.html
+++ b/app/templates/bikes/new.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}New bike - bike-admin{% endblock %}
+{% block title %}New bike - volundr{% endblock %}
 {% block content %}
 <div class="page-head"><h1>New bike</h1></div>
 <div class="card">
diff --git a/app/templates/dashboard.html b/app/templates/dashboard.html
index b9a1cda..d84f776 100644
--- a/app/templates/dashboard.html
+++ b/app/templates/dashboard.html
@@ -1,5 +1,5 @@
 {% extends "base.html" %}
-{% block title %}Dashboard - bike-admin{% endblock %}
+{% block title %}Dashboard - volundr{% endblock %}
 {% block content %}
 <div class="page-head">
   <h1>Your bikes</h1>
diff --git a/app/templates/login.html b/app/templates/login.html
index 2c0859b..c89c1e5 100644
--- a/app/templates/login.html
+++ b/app/templates/login.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<title>Log in - bike-admin</title>
+<title>Log in - volundr</title>
 <link rel="icon" href="/static/favicon.svg" type="image/svg+xml">
 <link rel="stylesheet" href="/static/main.css">
 </head>
 <body class="auth">
 <main class="container auth-card">
-  <h1 style="margin-top:0">bike-admin</h1>
+  <h1 style="margin-top:0">volundr</h1>
   <p class="muted">Log in to manage your bikes.</p>
 
   {% if error %}
diff --git a/deploy/bike_admin.service b/deploy/bike_admin.service
new file mode 100644
index 0000000..3a1ce98
--- /dev/null
+++ b/deploy/bike_admin.service
@@ -0,0 +1,27 @@
+[Unit]
+Description=volundr (bike service-due + MOT/insurance tracker)
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=bike
+Group=bike
+WorkingDirectory=/opt/bike_admin
+# Leading `-` = optional: the app still boots (and prompts for a password)
+# if the .env has not been created yet.
+EnvironmentFile=-/opt/bike_admin/.env
+ExecStart=/opt/bike_admin/.venv/bin/uvicorn app.main:app \
+  --host 0.0.0.0 --port 8000 \
+  --forwarded-allow-ips 192.168.0.0/16 --proxy-headers
+Restart=on-failure
+RestartSec=2
+# Hardening
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=full
+ProtectHome=true
+ReadWritePaths=/opt/bike_admin/data
+
+[Install]
+WantedBy=multi-user.target
diff --git a/deploy/env.production.example b/deploy/env.production.example
new file mode 100644
index 0000000..ac2cd12
--- /dev/null
+++ b/deploy/env.production.example
@@ -0,0 +1,25 @@
+# bike_admin production environment (copied to /opt/bike_admin/.env on the server)
+# All values are BIKE_ADMIN_-prefixed. This file is NOT committed (see .gitignore).
+
+# --- Required -------------------------------------------------
+BIKE_ADMIN_USERNAME=jake
+BIKE_ADMIN_PASSWORD=change-me-to-something-strong
+
+# --- Required in production -----------------------------------
+# Secret used to derive the CSRF / session tokens. Generate with:
+#   python3 -c "import secrets;print(secrets.token_urlsafe(32))"
+BIKE_ADMIN_SECRET_KEY=
+
+# Adds the Secure flag to the session cookie (we're served over HTTPS via Caddy).
+BIKE_ADMIN_IS_PRODUCTION=true
+
+# Bind to all interfaces so the hermodr reverse proxy (on another host) can reach it.
+# The app trusts X-Forwarded-* headers from the proxy (BIKE_ADMIN_TRUST_PROXY defaults true).
+BIKE_ADMIN_BIND_HOST=0.0.0.0
+BIKE_ADMIN_BIND_PORT=8000
+
+# --- Optional fine-tuning (defaults shown) ---------------------
+# BIKE_ADMIN_SERVICE_DUE_SOON_MILES=200   # service "book soon" lead time
+# BIKE_ADMIN_RENEWAL_DUE_SOON_DAYS=60     # MOT/insurance "due soon" lead time
+# BIKE_ADMIN_RENEWAL_MONTHS=12            # MOT/insurance validity (months)
+# BIKE_ADMIN_DATA_DIR=/opt/bike_admin/data