diff --git a/.drone.yml b/.drone.yml
new file mode 100644
index 0000000..c4b624c
--- /dev/null
+++ b/.drone.yml
@@ -0,0 +1,41 @@
+---
+kind: pipeline
+name: deploy to swarm-test.autonomic.zone
+steps:
+  - name: deployment
+    image: git.coopcloud.tech/coop-cloud/stack-ssh-deploy:latest
+    settings:
+      host: swarm-test.autonomic.zone
+      stack: botamusique
+      generate_secrets: true
+      purge: true
+      deploy_key:
+        from_secret: drone_ssh_swarm_test
+      networks:
+        - proxy
+    environment:
+      DOMAIN: botamusique.swarm-test.autonomic.zone
+      STACK_NAME: botamusique
+      LETS_ENCRYPT_ENV: production
+      ENTRYPOINT_CONF_VERSION: v1
+      SECRET_BAM_CERTIFICATE_VERSION: v1
+      SECRET_MUMBLE_PASSWORD_VERSION: v1
+trigger:
+  branch:
+    - main
+---
+kind: pipeline
+name: generate recipe catalogue
+steps:
+  - name: release a new version
+    image: plugins/downstream
+    settings:
+      server: https://build.coopcloud.tech
+      token:
+        from_secret: drone_abra-bot_token
+      fork: true
+      repositories:
+        - coop-cloud/auto-recipes-catalogue-json
+
+trigger:
+  event: tag
diff --git a/.env.sample b/.env.sample
index 76e9922..036a181 100644
--- a/.env.sample
+++ b/.env.sample
@@ -13,4 +13,4 @@ LETS_ENCRYPT_ENV=production
 #BAM_VERBOSE=
 
 SECRET_BAM_CERTIFICATE_VERSION=v1
-SECRET_BAM_MUMBLE_PASSWORD=v1
+SECRET_MUMBLE_PASSWORD_VERSION=v1
diff --git a/README.md b/README.md
index aafb291..4659b5b 100644
--- a/README.md
+++ b/README.md
@@ -21,9 +21,9 @@ Bot to play youtube / soundcloud / radio / local music on Mumble
 2. Deploy [`coop-cloud/traefik`]
 3. `abra app new botamusique --secrets` (optionally with `--pass` if you'd like
    to save secrets in `pass`)
-4. `abra app YOURAPPDOMAIN config` - be sure to change `$DOMAIN` to something that resolves to
+4. `abra app config YOURAPPDOMAIN` - be sure to change `$DOMAIN` to something that resolves to
    your Docker swarm box
-5. `abra app YOURAPPDOMAIN deploy`
+5. `abra app deploy YOURAPPDOMAIN`
 6. Open the configured domain in your browser to finish set-up
 
 NB you currently need to manually generate a certificate: