diff --git a/0BUILD b/0BUILD
index 5b6a2c6..1ebbd0c 100644
--- a/0BUILD
+++ b/0BUILD
@@ -149,6 +149,7 @@
       <dep id="gwenhywfar" name="gwenhywfar" minversion="5.11.2" required="TRUE" >
         <variables>plugindir gwengui-fox16</variables>
       </dep>
+      <dep id="aqcgi" name="aqcgi" minversion="0.0.1" required="TRUE" />
 <!--      <dep id="aqdatabase" name="aqdatabase" minversion="1.99.1" required="TRUE" >
         <variables>aqdatabase_typemakerdir</variables>
       </dep>
diff --git a/apps/0BUILD b/apps/0BUILD
index e97532b..819095b 100644
--- a/apps/0BUILD
+++ b/apps/0BUILD
@@ -8,6 +8,7 @@
     aqhome-data
     aqhome-nodes
     aqhome-react
+    aqhome-cgi
   </subdirs>
 
 </gwbuild>
diff --git a/apps/aqhome-cgi/0BUILD b/apps/aqhome-cgi/0BUILD
new file mode 100644
index 0000000..1cc8bdf
--- /dev/null
+++ b/apps/aqhome-cgi/0BUILD
@@ -0,0 +1,142 @@
+<?xml?>
+
+<gwbuild>
+
+
+  <target type="Program" name="aqhome-cgi" install="$(sbindir)" >
+
+    <includes type="c" >
+      $(gwenhywfar_cflags)
+      $(aqcgi_cflags)
+      -I$(topsrcdir)
+      -I$(topbuilddir)
+      -I$(topsrcdir)/apps
+      -I$(topbuilddir)/apps
+      -I$(builddir)
+      -I$(srcdir)
+    </includes>
+  
+    <includes type="tm2" >
+      --include=$(builddir)
+      --include=$(srcdir)
+    </includes>
+
+    <setVar name="local/cflags">$(visibility_cflags)</setVar>
+
+    <setVar name="tm2flags" >
+    </setVar>
+
+    <setVar name="local/typefiles" >
+    </setVar>
+  
+    <setVar name="local/built_sources" >
+    </setVar>
+  
+    <setVar name="local/built_headers_pub">
+    </setVar>
+  
+    <setVar name="local/built_headers_priv" >
+    </setVar>
+
+    <headers dist="true" >
+    </headers>
+  
+    <sources>
+      $(local/typefiles)
+      main.c
+    </sources>
+
+    <useTargets>
+      aqhome
+      aqhomecgi
+      aqhcgi_service
+    </useTargets>
+
+    <libraries>
+      $(gwenhywfar_libs)
+      -lm
+    </libraries>
+
+    <subdirs>
+    </subdirs>
+
+
+    <extradist>
+    </extradist>
+
+
+  </target>
+
+
+
+  <target type="ConvenienceLibrary" name="aqhomecgi" >
+
+    <includes type="c" >
+      $(gwenhywfar_cflags)
+      -I$(topsrcdir)
+      -I$(topbuilddir)
+      -I$(topsrcdir)/apps
+      -I$(topbuilddir)/apps
+      -I$(builddir)
+      -I$(srcdir)
+    </includes>
+  
+    <includes type="tm2" >
+      --include=$(builddir)
+      --include=$(srcdir)
+    </includes>
+
+    <setVar name="local/cflags">$(visibility_cflags)</setVar>
+
+    <setVar name="tm2flags" >
+    </setVar>
+
+    <setVar name="local/typefiles" >
+    </setVar>
+  
+    <setVar name="local/built_sources" >
+    </setVar>
+  
+    <setVar name="local/built_headers_pub">
+    </setVar>
+  
+    <setVar name="local/built_headers_priv" >
+    </setVar>
+
+    <headers dist="true" >
+      service_file.h
+      service_file_p.h
+    </headers>
+  
+    <sources>
+      $(local/typefiles)
+
+      service_file.c
+    </sources>
+
+    <useTargets>
+      aqhome
+      aqhcgi_service
+    </useTargets>
+
+    <libraries>
+      $(gwenhywfar_libs)
+      -lm
+      $(aqcgi_libs)
+    </libraries>
+
+    <subdirs>
+      service
+    </subdirs>
+
+
+    <extradist>
+    </extradist>
+
+
+  </target>
+
+
+</gwbuild>
+
+
diff --git a/apps/aqhome-cgi/dummy.c b/apps/aqhome-cgi/dummy.c
new file mode 100644
index 0000000..e69de29
diff --git a/apps/aqhome-cgi/main.c b/apps/aqhome-cgi/main.c
new file mode 100644
index 0000000..b9676a7
--- /dev/null
+++ b/apps/aqhome-cgi/main.c
@@ -0,0 +1,11 @@
+
+
+
+
+
+int main(int argc, char **argv)
+{
+  return 0;
+}
+
+
diff --git a/apps/aqhome-cgi/service/0BUILD b/apps/aqhome-cgi/service/0BUILD
new file mode 100644
index 0000000..f47c300
--- /dev/null
+++ b/apps/aqhome-cgi/service/0BUILD
@@ -0,0 +1,86 @@
+<?xml?>
+
+<gwbuild>
+
+  <target type="ConvenienceLibrary" name="aqhcgi_service" >
+
+    <includes type="c" >
+      $(gwenhywfar_cflags)
+      -I$(topsrcdir)
+      -I$(topbuilddir)
+      -I$(topsrcdir)/apps
+      -I$(topbuilddir)/apps
+      -I$(builddir)
+      -I$(srcdir)
+    </includes>
+  
+    <includes type="tm2" >
+      --include=$(builddir)
+      --include=$(srcdir)
+    </includes>
+
+
+    <define name="BUILDING_AQHOME" />
+
+    <setVar name="local/cflags">$(visibility_cflags)</setVar>
+
+  
+    <setVar name="tm2flags-INACTIVE" >
+      --api=AQHOME_API
+    </setVar>
+
+    <setVar name="local/typefiles" >
+      module.t2d
+      moduleperms.t2d
+      role.t2d
+      user.t2d
+      session.t2d
+      permdef.t2d
+    </setVar>
+  
+    <setVar name="local/built_sources" >
+    </setVar>
+  
+    <setVar name="local/built_headers_pub">
+    </setVar>
+  
+  
+    <setVar name="local/built_headers_priv" >
+    </setVar>
+
+
+    <headers dist="false" install="$(pkgincludedir)/service" >
+      $(local/built_headers_pub)
+    </headers>
+  
+  
+    <headers dist="true" install="$(pkgincludedir)/service" >
+      service.h
+    </headers>
+
+
+    <headers dist="true" >
+      service_p.h
+    </headers>
+  
+  
+    <sources>
+      $(local/typefiles)
+
+      service.c
+    </sources>
+
+
+    <extradist>
+    </extradist>
+
+
+    <useTargets>
+    </useTargets>
+
+    <subdirs>
+    </subdirs>
+
+  </target>
+  
+</gwbuild>
diff --git a/apps/aqhome-cgi/service/README b/apps/aqhome-cgi/service/README
new file mode 100644
index 0000000..6e1b52b
--- /dev/null
+++ b/apps/aqhome-cgi/service/README
@@ -0,0 +1,20 @@
+
+
+- service:
+  - userList
+  - rootModule
+  - sessionList
+
+- user:
+  - modulePerms
+
+- module:
+  - roleList
+  - permDefList
+
+- session
+
+
+
+
+
diff --git a/apps/aqhome-cgi/service/module.t2d b/apps/aqhome-cgi/service/module.t2d
new file mode 100644
index 0000000..ecf4423
--- /dev/null
+++ b/apps/aqhome-cgi/service/module.t2d
@@ -0,0 +1,103 @@
+<?xml?>
+
+<tm2>
+  <type id="AQH_MODULE" type="pointer">
+    <descr>
+    </descr>
+    <lang id="c">
+      <identifier>AQH_MODULE</identifier>
+      <prefix>AQH_Module</prefix>
+      <baseFileName>module</baseFileName>
+      
+      <flags>
+        with_inherit
+        with_xml
+        with_db
+        with_list1
+        with_list2
+        with_tree2
+        nodup
+        nocopy
+      </flags>
+      
+      <headers>
+        <header type="sys" loc="pre">aqhome/api.h</header>
+        <header type="sys" loc="pre">gwenhywfar/error.h</header>
+        <header type="sys" loc="post">aqhome-cgi/service/role.h</header>
+        <header type="sys" loc="post">aqhome-cgi/service/permdef.h</header>
+      </headers>
+
+      <inlines>
+      </inlines>
+
+    </lang>
+
+    <defines>
+      <define id="AQH_MODULE_FLAGS" prefix="AQH_MODULE_FLAGS_">
+        <item name="ACTIVE"      value="0x00000001" />
+     </define>
+      
+    </defines>
+
+
+    <members>
+  
+      <member name="id" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>with_getbymember</flags>
+      </member>
+
+      <member name="flags" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>with_flags</flags>
+      </member>
+
+      <member name="name" type="char_ptr" maxlen="16">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own with_getbymember</flags>
+      </member>
+
+      <member name="descr" type="char_ptr" maxlen="256">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="guestPerms" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags></flags>
+      </member>
+
+      <member name="roleList" type="AQH_ROLE_LIST" elementName="role" >
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <flags>own</flags>
+        <getflags>none</getflags>
+        <setflags>none</setflags>
+      </member>
+
+      <member name="permDefList" type="AQH_PERMDEF_LIST" elementName="permdef" >
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <flags>own</flags>
+        <getflags>none</getflags>
+        <setflags>none</setflags>
+      </member>
+
+    </members>
+    
+  </type>
+  
+</tm2>
+
diff --git a/apps/aqhome-cgi/service/moduleperms.t2d b/apps/aqhome-cgi/service/moduleperms.t2d
new file mode 100644
index 0000000..bc4569e
--- /dev/null
+++ b/apps/aqhome-cgi/service/moduleperms.t2d
@@ -0,0 +1,75 @@
+<?xml?>
+
+<tm2>
+  <type id="AQH_MODULE_PERMS" type="pointer">
+    <descr>
+    </descr>
+    <lang id="c">
+      <identifier>AQH_MODULE_PERMS</identifier>
+      <prefix>AQH_ModulePerms</prefix>
+      <baseFileName>moduleperms</baseFileName>
+      
+      <flags>
+        with_inherit
+        with_xml
+        with_db
+        with_list1
+        with_list2
+      </flags>
+      
+      <headers>
+        <header type="sys" loc="pre">aqhome/api.h</header>
+        <header type="sys" loc="pre">gwenhywfar/error.h</header>
+        <header type="sys" loc="post">aqhome-cgi/service/role.h</header>
+      </headers>
+
+      <inlines>
+      </inlines>
+
+    </lang>
+
+
+    <members>
+  
+      <member name="moduleId" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>with_getbymember</flags>
+      </member>
+
+      <member name="exclAddPerms" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags></flags>
+      </member>
+
+      <member name="exclDelPerms" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags></flags>
+      </member>
+
+      <member name="roleArray" type="uint8_t_array" maxlen="16">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags></flags>
+      </member>
+
+
+      <member name="perms" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>volatile</flags>
+      </member>
+
+    </members>
+    
+  </type>
+  
+</tm2>
+
diff --git a/apps/aqhome-cgi/service/permdef.t2d b/apps/aqhome-cgi/service/permdef.t2d
new file mode 100644
index 0000000..63df78b
--- /dev/null
+++ b/apps/aqhome-cgi/service/permdef.t2d
@@ -0,0 +1,65 @@
+<?xml?>
+
+<tm2>
+  <type id="AQH_PERMDEF" type="pointer">
+    <descr>
+    </descr>
+    <lang id="c">
+      <identifier>AQH_PERMDEF</identifier>
+      <prefix>AQH_PermDef</prefix>
+      <baseFileName>permdef</baseFileName>
+      
+      <flags>
+        with_xml
+        with_db
+        with_list1
+        nodup
+        nocopy
+      </flags>
+      
+      <headers>
+        <header type="sys" loc="pre">aqhome/api.h</header>
+      </headers>
+
+      <inlines>
+      </inlines>
+
+    </lang>
+
+
+    <members>
+
+      <member name="id" type="char_ptr" maxlen="32">
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <flags>own with_getbymember</flags>
+      </member>
+
+      <member name="name" type="char_ptr" maxlen="32">
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <flags>own with_getbymember</flags>
+      </member>
+  
+      <member name="mask" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own with_getbymember</flags>
+      </member>
+
+      <member name="descr" type="char_ptr" maxlen="256">
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+    </members>
+    
+  </type>
+  
+</tm2>
+
diff --git a/apps/aqhome-cgi/service/role.t2d b/apps/aqhome-cgi/service/role.t2d
new file mode 100644
index 0000000..da88084
--- /dev/null
+++ b/apps/aqhome-cgi/service/role.t2d
@@ -0,0 +1,72 @@
+<?xml?>
+
+<tm2>
+  <type id="AQH_ROLE" type="pointer">
+    <descr>
+    </descr>
+    <lang id="c">
+      <identifier>AQH_ROLE</identifier>
+      <prefix>AQH_Role</prefix>
+      <baseFileName>role</baseFileName>
+      
+      <flags>
+        with_xml
+        with_db
+        with_list1
+        with_list2
+      </flags>
+      
+      <headers>
+        <header type="sys" loc="pre">aqhome/api.h</header>
+        <header type="sys" loc="pre">gwenhywfar/error.h</header>
+      </headers>
+
+      <inlines>
+      </inlines>
+
+    </lang>
+
+
+    <members>
+  
+      <member name="id" type="uint8_t" maxlen="1">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>with_getbymember</flags>
+      </member>
+
+      <member name="name" type="char_ptr" maxlen="16">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="perms" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags></flags>
+      </member>
+
+      <member name="explAddPerms" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags></flags>
+      </member>
+
+      <member name="explDelPerms" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags></flags>
+      </member>
+
+    </members>
+    
+  </type>
+  
+</tm2>
+
diff --git a/apps/aqhome-cgi/service/service.c b/apps/aqhome-cgi/service/service.c
new file mode 100644
index 0000000..c163972
--- /dev/null
+++ b/apps/aqhome-cgi/service/service.c
@@ -0,0 +1,355 @@
+/****************************************************************************
+ * This file is part of the project AqHome.
+ * AqHome (c) by 2025 Martin Preuss, all rights reserved.
+ *
+ * The license for this file can be found in the file COPYING which you
+ * should have received along with this file.
+ ****************************************************************************/
+
+#ifdef HAVE_CONFIG_H
+# include <config.h>
+#endif
+
+//#define DISABLE_DEBUGLOG
+
+
+#include "aqhome-cgi/service/service_p.h"
+
+#include <gwenhywfar/stringlist.h>
+#include <gwenhywfar/text.h>
+#include <gwenhywfar/debug.h>
+
+
+
+GWEN_INHERIT_FUNCTIONS(AQH_SERVICE);
+GWEN_LIST_FUNCTIONS(AQH_SERVICE, AQH_Service);
+
+
+
+
+AQH_SERVICE *AQH_Service_new(void)
+{
+  AQH_SERVICE *sv;
+
+  GWEN_NEW_OBJECT(AQH_SERVICE, sv);
+  GWEN_INHERIT_INIT(AQH_SERVICE, sv);
+  GWEN_LIST_INIT(AQH_SERVICE, sv);
+
+  return sv;
+}
+
+
+
+void AQH_Service_free(AQH_SERVICE *sv)
+{
+  if (sv) {
+    GWEN_LIST_FINI(AQH_SERVICE, sv);
+    GWEN_INHERIT_FINI(AQH_SERVICE, sv);
+
+    GWEN_FREE_OBJECT(sv);
+  }
+}
+
+
+#if 0
+AQH_MODULE *AQH_Service_GetModuleByPath(const AQH_SERVICE *sv, const char *s)
+{
+  if (sv && s && *s) {
+    GWEN_STRINGLIST *sl;
+
+    sl=GWEN_StringList_fromString2(s, "/", 0,
+                                   GWEN_TEXT_FLAGS_DEL_QUOTES |
+                                   GWEN_TEXT_FLAGS_DEL_LEADING_BLANKS |
+                                   GWEN_TEXT_FLAGS_DEL_MULTIPLE_BLANKS |
+                                   GWEN_TEXT_FLAGS_DEL_TRAILING_BLANKS);
+    if (sl) {
+      GWEN_STRINGLISTENTRY *se;
+      AQH_MODULE *m;
+
+      m=sv->rootModule;
+      se=GWEN_StringList_FirstEntry(sl);
+      while(se && m) {
+        const char *sWantedName;
+
+        sWantedName=GWEN_StringListEntry_Data(se);
+        if (sWantedName && *sWantedName) {
+          AQH_MODULE *mTemp;
+
+          mTemp=AQH_Module_Tree2_GetFirstChild(m);
+          while(mTemp) {
+            const char *sModName;
+
+            sModName=AQH_Module_GetName(mTemp);
+            if (sModName && *sModName && 0==strcasecmp(sModName, sWantedName))
+              break;
+            mTemp=AQH_Module_Tree2_GetNext(mTemp);
+          }
+          if (mTemp==NULL) {
+            DBG_ERROR(NULL, "Module \%s\" not found", sWantedName);
+            GWEN_StringList_free(sl);
+            return NULL;
+          }
+          m=mTemp;
+        }
+        else {
+          DBG_ERROR(NULL, "Empty path element in \"%s\"", s);
+          GWEN_StringList_free(sl);
+          return NULL;
+        }
+
+        se=GWEN_StringListEntry_Next(se);
+      } /* while(se && m) */
+      GWEN_StringList_free(sl);
+      return m;
+    }
+    else {
+      DBG_ERROR(NULL, "Bad path \"%s\"", s);
+    }
+  }
+  return NULL;
+}
+#endif
+
+
+
+int AQH_Service_HandleRequest(AQH_SERVICE *sv, AQCGI_REQUEST *req)
+{
+  return (sv && sv->handleRequestFn)?(sv->handleRequestFn(sv, req)):GWEN_ERROR_NOT_IMPLEMENTED;
+}
+
+
+
+AQH_USER *AQH_Service_LoadUser(AQH_SERVICE *sv, const char *s)
+{
+  return (sv && sv->loadUserFn)?(sv->loadUserFn(sv, s)):NULL;
+}
+
+
+
+int AQH_Service_SaveUser(AQH_SERVICE *sv, AQH_USER *user)
+{
+  return (sv && sv->saveUserFn)?(sv->saveUserFn(sv, user)):GWEN_ERROR_NOT_IMPLEMENTED;
+}
+
+
+
+int AQH_Service_AddUser(AQH_SERVICE *sv, AQH_USER *user)
+{
+  return (sv && sv->addUserFn)?(sv->addUserFn(sv, user)):GWEN_ERROR_NOT_IMPLEMENTED;
+}
+
+
+
+int AQH_Service_DelUser(AQH_SERVICE *sv, const char *s)
+{
+  return (sv && sv->delUserFn)?(sv->delUserFn(sv, s)):GWEN_ERROR_NOT_IMPLEMENTED;
+}
+
+
+
+GWEN_STRINGLIST *AQH_Service_ListUsers(AQH_SERVICE *sv)
+{
+  return (sv && sv->listUsersFn)?(sv->listUsersFn(sv)):NULL;
+}
+
+
+
+AQH_MODULE *AQH_Service_LoadModule(AQH_SERVICE *sv, const char *s)
+{
+  return (sv && sv->loadModuleFn)?(sv->loadModuleFn(sv, s)):NULL;
+}
+
+
+
+int AQH_Service_SaveModule(AQH_SERVICE *sv, AQH_MODULE *module)
+{
+  return (sv && sv->saveModuleFn)?(sv->saveModuleFn(sv, module)):GWEN_ERROR_NOT_IMPLEMENTED;
+}
+
+
+
+int AQH_Service_AddModule(AQH_SERVICE *sv, AQH_MODULE *module)
+{
+  return (sv && sv->addModuleFn)?(sv->addModuleFn(sv, module)):GWEN_ERROR_NOT_IMPLEMENTED;
+}
+
+
+
+int AQH_Service_DelModule(AQH_SERVICE *sv, const char *s)
+{
+  return (sv && sv->delModuleFn)?(sv->delModuleFn(sv, s)):GWEN_ERROR_NOT_IMPLEMENTED;
+}
+
+
+
+GWEN_STRINGLIST *AQH_Service_ListModules(AQH_SERVICE *sv)
+{
+  return (sv && sv->listModulesFn)?(sv->listModulesFn(sv)):NULL;
+}
+
+
+
+AQH_SESSION* AQH_Service_LoadSession(AQH_SERVICE *sv, const char *s)
+{
+  return (sv && sv->loadSessionFn)?(sv->loadSessionFn(sv, s)):NULL;
+}
+
+
+
+int AQH_Service_SaveSession(AQH_SERVICE *sv, AQH_SESSION *session)
+{
+  return (sv && sv->saveSessionFn)?(sv->saveSessionFn(sv, session)):GWEN_ERROR_NOT_IMPLEMENTED;
+}
+
+
+
+int AQH_Service_AddSession(AQH_SERVICE *sv, AQH_SESSION *session)
+{
+  return (sv && sv->addSessionFn)?(sv->addSessionFn(sv, session)):GWEN_ERROR_NOT_IMPLEMENTED;
+}
+
+
+
+int AQH_Service_DelSession(AQH_SERVICE *sv, const char *s)
+{
+  return (sv && sv->delSessionFn)?(sv->delSessionFn(sv, s)):GWEN_ERROR_NOT_IMPLEMENTED;
+}
+
+
+
+
+
+
+void AQH_Service_SetHandleRequestFn(AQH_SERVICE *sv, AQH_SERVICE_HANDLEREQUEST_FN f)
+{
+  if (sv)
+    sv->handleRequestFn=f;
+}
+
+
+
+void AQH_Service_SetLoadUserFn(AQH_SERVICE *sv, AQH_SERVICE_LOADUSER_FN f)
+{
+  if (sv)
+    sv->loadUserFn=f;
+}
+
+
+
+void AQH_Service_SetSaveUserFn(AQH_SERVICE *sv, AQH_SERVICE_SAVEUSER_FN f)
+{
+  if (sv)
+    sv->saveUserFn=f;
+}
+
+
+
+void AQH_Service_SetAddUserFn(AQH_SERVICE *sv, AQH_SERVICE_ADDUSER_FN f)
+{
+  if (sv)
+    sv->addUserFn=f;
+}
+
+
+
+void AQH_Service_SetDelUserFn(AQH_SERVICE *sv, AQH_SERVICE_DELUSER_FN f)
+{
+  if (sv)
+    sv->delUserFn=f;
+}
+
+
+
+void AQH_Service_SetListUsersFn(AQH_SERVICE *sv, AQH_SERVICE_LISTUSERS_FN f)
+{
+  if (sv)
+    sv->listUsersFn=f;
+}
+
+
+
+void AQH_Service_SetLoadModuleFn(AQH_SERVICE *sv, AQH_SERVICE_LOADMODULE_FN f)
+{
+  if (sv)
+    sv->loadModuleFn=f;
+}
+
+
+
+void AQH_Service_SetSaveModuleFn(AQH_SERVICE *sv, AQH_SERVICE_SAVEMODULE_FN f)
+{
+  if (sv)
+    sv->saveModuleFn=f;
+}
+
+
+
+void AQH_Service_SetAddModuleFn(AQH_SERVICE *sv, AQH_SERVICE_ADDMODULE_FN f)
+{
+  if (sv)
+    sv->addModuleFn=f;
+}
+
+
+
+void AQH_Service_SetDelModuleFn(AQH_SERVICE *sv, AQH_SERVICE_DELMODULE_FN f)
+{
+  if (sv)
+    sv->delModuleFn=f;
+}
+
+
+
+void AQH_Service_SetListModulesFn(AQH_SERVICE *sv, AQH_SERVICE_LISTMODULES_FN f)
+{
+  if (sv)
+    sv->listModulesFn=f;
+}
+
+
+
+void AQH_Service_SetLoadSessionFn(AQH_SERVICE *sv, AQH_SERVICE_LOADSESSION_FN f)
+{
+  if (sv)
+    sv->loadSessionFn=f;
+}
+
+
+
+void AQH_Service_SetSaveSessionFn(AQH_SERVICE *sv, AQH_SERVICE_SAVESESSION_FN f)
+{
+  if (sv)
+    sv->saveSessionFn=f;
+}
+
+
+
+void AQH_Service_SetAddSessionFn(AQH_SERVICE *sv, AQH_SERVICE_ADDSESSION_FN f)
+{
+  if (sv)
+    sv->addSessionFn=f;
+}
+
+
+
+void AQH_Service_SetDelSessionFn(AQH_SERVICE *sv, AQH_SERVICE_DELSESSION_FN f)
+{
+  if (sv)
+    sv->delSessionFn=f;
+}
+
+
+
+void AQH_Service_SetListSessionsFn(AQH_SERVICE *sv, AQH_SERVICE_LISTSESSIONS_FN f)
+{
+  if (sv)
+    sv->listSessionsFn=f;
+}
+
+
+
+
+
+
+
+
diff --git a/apps/aqhome-cgi/service/service.h b/apps/aqhome-cgi/service/service.h
new file mode 100644
index 0000000..e8b258f
--- /dev/null
+++ b/apps/aqhome-cgi/service/service.h
@@ -0,0 +1,104 @@
+/****************************************************************************
+ * This file is part of the project AqHome.
+ * AqHome (c) by 2025 Martin Preuss, all rights reserved.
+ *
+ * The license for this file can be found in the file COPYING which you
+ * should have received along with this file.
+ ****************************************************************************/
+
+#ifndef AQHOME_SERVICE_H
+#define AQHOME_SERVICE_H
+
+
+#include <aqhome/api.h>
+
+#include <gwenhywfar/inherit.h>
+#include <gwenhywfar/list.h>
+#include <gwenhywfar/stringlist.h>
+
+
+typedef struct AQH_SERVICE AQH_SERVICE;
+GWEN_INHERIT_FUNCTION_DEFS(AQH_SERVICE);
+GWEN_LIST_FUNCTION_DEFS(AQH_SERVICE, AQH_Service);
+
+
+#include "aqhome-cgi/service/user.h"
+#include "aqhome-cgi/service/module.h"
+#include "aqhome-cgi/service/session.h"
+
+#include <aqcgi/cgi.h>
+
+
+typedef int (*AQH_SERVICE_HANDLEREQUEST_FN)(AQH_SERVICE *sv, AQCGI_REQUEST *req);
+
+typedef AQH_USER* (*AQH_SERVICE_LOADUSER_FN)(AQH_SERVICE *sv, const char *s);
+typedef int (*AQH_SERVICE_SAVEUSER_FN)(AQH_SERVICE *sv, AQH_USER *user);
+typedef int (*AQH_SERVICE_ADDUSER_FN)(AQH_SERVICE *sv, AQH_USER *user);
+typedef int (*AQH_SERVICE_DELUSER_FN)(AQH_SERVICE *sv, const char *s);
+typedef GWEN_STRINGLIST* (*AQH_SERVICE_LISTUSERS_FN)(AQH_SERVICE *sv);
+
+typedef AQH_MODULE* (*AQH_SERVICE_LOADMODULE_FN)(AQH_SERVICE *sv, const char *s);
+typedef int (*AQH_SERVICE_SAVEMODULE_FN)(AQH_SERVICE *sv, AQH_MODULE *module);
+typedef int (*AQH_SERVICE_ADDMODULE_FN)(AQH_SERVICE *sv, AQH_MODULE *module);
+typedef int (*AQH_SERVICE_DELMODULE_FN)(AQH_SERVICE *sv, const char *s);
+typedef GWEN_STRINGLIST* (*AQH_SERVICE_LISTMODULES_FN)(AQH_SERVICE *sv);
+
+
+typedef AQH_SESSION* (*AQH_SERVICE_LOADSESSION_FN)(AQH_SERVICE *sv, const char *s);
+typedef int (*AQH_SERVICE_SAVESESSION_FN)(AQH_SERVICE *sv, AQH_SESSION *session);
+typedef int (*AQH_SERVICE_ADDSESSION_FN)(AQH_SERVICE *sv, AQH_SESSION *session);
+typedef int (*AQH_SERVICE_DELSESSION_FN)(AQH_SERVICE *sv, const char *s);
+typedef GWEN_STRINGLIST* (*AQH_SERVICE_LISTSESSIONS_FN)(AQH_SERVICE *sv);
+
+
+
+AQH_SERVICE *AQH_Service_new(void);
+void AQH_Service_free(AQH_SERVICE *sv);
+
+
+
+int AQH_Service_HandleRequest(AQH_SERVICE *sv, AQCGI_REQUEST *req);
+
+AQH_USER *AQH_Service_LoadUser(AQH_SERVICE *sv, const char *s);
+int AQH_Service_SaveUser(AQH_SERVICE *sv, AQH_USER *user);
+int AQH_Service_AddUser(AQH_SERVICE *sv, AQH_USER *user);
+int AQH_Service_DelUser(AQH_SERVICE *sv, const char *s);
+GWEN_STRINGLIST *AQH_Service_ListUsers(AQH_SERVICE *sv);
+
+AQH_MODULE *AQH_Service_LoadModule(AQH_SERVICE *sv, const char *s);
+int AQH_Service_SaveModule(AQH_SERVICE *sv, AQH_MODULE *module);
+int AQH_Service_AddModule(AQH_SERVICE *sv, AQH_MODULE *module);
+int AQH_Service_DelModule(AQH_SERVICE *sv, const char *s);
+GWEN_STRINGLIST *AQH_Service_ListModules(AQH_SERVICE *sv);
+
+AQH_SESSION* AQH_Service_LoadSession(AQH_SERVICE *sv, const char *s);
+int AQH_Service_SaveSession(AQH_SERVICE *sv, AQH_SESSION *session);
+int AQH_Service_AddSession(AQH_SERVICE *sv, AQH_SESSION *session);
+int AQH_Service_DelSession(AQH_SERVICE *sv, const char *s);
+GWEN_STRINGLIST *AQH_Service_ListSessions(AQH_SERVICE *sv);
+
+
+
+void AQH_Service_SetHandleRequestFn(AQH_SERVICE *sv, AQH_SERVICE_HANDLEREQUEST_FN f);
+
+void AQH_Service_SetLoadUserFn(AQH_SERVICE *sv, AQH_SERVICE_LOADUSER_FN f);
+void AQH_Service_SetSaveUserFn(AQH_SERVICE *sv, AQH_SERVICE_SAVEUSER_FN f);
+void AQH_Service_SetAddUserFn(AQH_SERVICE *sv, AQH_SERVICE_ADDUSER_FN f);
+void AQH_Service_SetDelUserFn(AQH_SERVICE *sv, AQH_SERVICE_DELUSER_FN f);
+void AQH_Service_SetListUsersFn(AQH_SERVICE *sv, AQH_SERVICE_LISTUSERS_FN f);
+
+void AQH_Service_SetLoadModuleFn(AQH_SERVICE *sv, AQH_SERVICE_LOADMODULE_FN f);
+void AQH_Service_SetSaveModuleFn(AQH_SERVICE *sv, AQH_SERVICE_SAVEMODULE_FN f);
+void AQH_Service_SetAddModuleFn(AQH_SERVICE *sv, AQH_SERVICE_ADDMODULE_FN f);
+void AQH_Service_SetDelModuleFn(AQH_SERVICE *sv, AQH_SERVICE_DELMODULE_FN f);
+void AQH_Service_SetListModulesFn(AQH_SERVICE *sv, AQH_SERVICE_LISTMODULES_FN f);
+
+void AQH_Service_SetLoadSessionFn(AQH_SERVICE *sv, AQH_SERVICE_LOADSESSION_FN f);
+void AQH_Service_SetSaveSessionFn(AQH_SERVICE *sv, AQH_SERVICE_SAVESESSION_FN f);
+void AQH_Service_SetAddSessionFn(AQH_SERVICE *sv, AQH_SERVICE_ADDSESSION_FN f);
+void AQH_Service_SetDelSessionFn(AQH_SERVICE *sv, AQH_SERVICE_DELSESSION_FN f);
+void AQH_Service_SetListSessionsFn(AQH_SERVICE *sv, AQH_SERVICE_LISTSESSIONS_FN f);
+
+
+
+#endif
diff --git a/apps/aqhome-cgi/service/service_p.h b/apps/aqhome-cgi/service/service_p.h
new file mode 100644
index 0000000..7311e35
--- /dev/null
+++ b/apps/aqhome-cgi/service/service_p.h
@@ -0,0 +1,45 @@
+/****************************************************************************
+ * This file is part of the project AqHome.
+ * AqHome (c) by 2023 Martin Preuss, all rights reserved.
+ *
+ * The license for this file can be found in the file COPYING which you
+ * should have received along with this file.
+ ****************************************************************************/
+
+#ifndef AQHOME_SERVICE_P_H
+#define AQHOME_SERVICE_P_H
+
+
+#include "aqhome-cgi/service/service.h"
+
+
+struct AQH_SERVICE {
+  GWEN_INHERIT_ELEMENT(AQH_SERVICE);
+  GWEN_LIST_ELEMENT(AQH_SERVICE);
+
+  AQH_SERVICE_HANDLEREQUEST_FN handleRequestFn;
+
+  AQH_SERVICE_LOADUSER_FN loadUserFn;
+  AQH_SERVICE_SAVEUSER_FN saveUserFn;
+  AQH_SERVICE_ADDUSER_FN addUserFn;
+  AQH_SERVICE_DELUSER_FN delUserFn;
+  AQH_SERVICE_LISTUSERS_FN listUsersFn;
+
+  AQH_SERVICE_LOADMODULE_FN loadModuleFn;
+  AQH_SERVICE_SAVEMODULE_FN saveModuleFn;
+  AQH_SERVICE_ADDMODULE_FN addModuleFn;
+  AQH_SERVICE_DELMODULE_FN delModuleFn;
+  AQH_SERVICE_LISTMODULES_FN listModulesFn;
+
+  AQH_SERVICE_LOADSESSION_FN loadSessionFn;
+  AQH_SERVICE_SAVESESSION_FN saveSessionFn;
+  AQH_SERVICE_ADDSESSION_FN addSessionFn;
+  AQH_SERVICE_DELSESSION_FN delSessionFn;
+  AQH_SERVICE_LISTSESSIONS_FN listSessionsFn;
+
+};
+
+
+
+
+#endif
diff --git a/apps/aqhome-cgi/service/session.t2d b/apps/aqhome-cgi/service/session.t2d
new file mode 100644
index 0000000..6f0d528
--- /dev/null
+++ b/apps/aqhome-cgi/service/session.t2d
@@ -0,0 +1,117 @@
+<?xml?>
+
+<tm2>
+  <type id="AQH_SESSION" type="pointer">
+    <descr>
+    </descr>
+    <lang id="c">
+      <identifier>AQH_SESSION</identifier>
+      <prefix>AQH_Session</prefix>
+      <baseFileName>session</baseFileName>
+      
+      <flags>
+        with_xml
+        with_db
+        with_list1
+        with_list2
+        nodup
+        nocopy
+      </flags>
+      
+      <headers>
+        <header type="sys" loc="pre">aqhome/api.h</header>
+        <header type="sys" loc="pre">gwenhywfar/error.h</header>
+        <header type="sys" loc="pre">gwenhywfar/timestamp.h</header>
+        <header type="sys" loc="post">aqhome-cgi/service/user.h</header>
+      </headers>
+
+      <inlines>
+      </inlines>
+
+    </lang>
+
+
+
+    <defines>
+      <define id="AQH_SESSION_RTFLAGS" prefix="AQH_SESSION_RTFLAGS_">
+        <item name="MODIFIED"    value="0x00000001" />
+      </define>
+    </defines>
+
+
+    <members>
+  
+      <member name="uid" type="char_ptr" maxlen="64">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own with_getbymember</flags>
+      </member>
+
+      <member name="flags" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>with_flags</flags>
+      </member>
+
+      <member name="userAlias" type="char_ptr" maxlen="64">
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="state" type="int" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags></flags>
+      </member>
+
+      <member name="tempToken" type="char_ptr" maxlen="64">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="timestampCreation" type="gwen_timestamp" maxlen="8">
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="timestampLastAccess" type="gwen_timestamp" maxlen="8">
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+
+      <member name="user" type="AQH_USER">
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <setflags>assign</setflags>
+        <getflags>none</getflags>
+        <flags>volatile nodup nocopy</flags>
+      </member>
+
+
+
+      <member name="runtimeFlags" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>with_flags volatile</flags>
+      </member>
+
+    </members>
+    
+  </type>
+  
+</tm2>
+
diff --git a/apps/aqhome-cgi/service/user.t2d b/apps/aqhome-cgi/service/user.t2d
new file mode 100644
index 0000000..a9ff05a
--- /dev/null
+++ b/apps/aqhome-cgi/service/user.t2d
@@ -0,0 +1,156 @@
+<?xml?>
+
+<tm2>
+  <type id="AQH_USER" type="pointer">
+    <descr>
+    </descr>
+    <lang id="c">
+      <identifier>AQH_USER</identifier>
+      <prefix>AQH_User</prefix>
+      <baseFileName>user</baseFileName>
+      
+      <flags>
+        with_xml
+        with_db
+        with_list1
+        with_list2
+        with_refcount
+        nodup
+        nocopy
+      </flags>
+      
+      <headers>
+        <header type="sys" loc="pre">aqhome/api.h</header>
+        <header type="sys" loc="pre">gwenhywfar/error.h</header>
+        <header type="sys" loc="pre">gwenhywfar/timestamp.h</header>
+        <header type="sys" loc="post">aqhome-cgi/service/moduleperms.h</header>
+      </headers>
+
+      <inlines>
+      </inlines>
+
+    </lang>
+
+    <defines>
+      <define id="AQH_USER_RTFLAGS" prefix="AQH_USER_RTFLAGS_">
+        <item name="MODIFIED"    value="0x00000001" />
+        <item name="PERMSCALC"   value="0x00000002" />
+     </define>
+      
+    </defines>
+
+    <enums>
+
+      <enum id="AQH_USER_STATE" prefix="AQH_UserState_">
+        <item name="suspended">
+          <descr>User suspended</descr>
+        </item>
+
+        <item name="waitForConfirmation">
+          <descr>Waiting for email confirmation</descr>
+        </item>
+
+        <item name="waitForApproval">
+          <descr>Waiting for approval by admin</descr>
+        </item>
+
+      </enum>
+
+    </enums>
+
+
+    <members>
+  
+      <member name="id" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>with_getbymember</flags>
+      </member>
+
+      <member name="flags" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>with_flags</flags>
+      </member>
+
+      <member name="state" type="int" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags></flags>
+      </member>
+
+      <member name="name" type="char_ptr" maxlen="16">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="alias" type="char_ptr" maxlen="16">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own with_getbymember</flags>
+      </member>
+
+      <member name="hashedPassword" type="char_ptr" maxlen="128">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="email" type="char_ptr" maxlen="128">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="notes" type="char_ptr" maxlen="256">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="timestampCreation" type="gwen_timestamp" maxlen="8">
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="timestampLastLogin" type="gwen_timestamp" maxlen="8">
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <flags>own</flags>
+      </member>
+
+      <member name="modulePermList" type="AQH_MODULE_PERMS_LIST">
+        <default>NULL</default>
+        <preset>NULL</preset>
+        <access>public</access>
+        <getflags>none</getflags>
+        <setflags>none</setflags>
+        <flags>own</flags>
+      </member>
+
+
+      <member name="runtimeFlags" type="uint32_t" maxlen="4">
+        <default>0</default>
+        <preset>0</preset>
+        <access>public</access>
+        <flags>volatile with_flags</flags>
+      </member>
+
+    </members>
+    
+  </type>
+  
+</tm2>
+
diff --git a/apps/aqhome-cgi/service_file.c b/apps/aqhome-cgi/service_file.c
new file mode 100644
index 0000000..b91ac87
--- /dev/null
+++ b/apps/aqhome-cgi/service_file.c
@@ -0,0 +1,579 @@
+/****************************************************************************
+ * This file is part of the project AqHome.
+ * AqHome (c) by 2025 Martin Preuss, all rights reserved.
+ *
+ * The license for this file can be found in the file COPYING which you
+ * should have received along with this file.
+ ****************************************************************************/
+
+#ifdef HAVE_CONFIG_H
+# include <config.h>
+#endif
+
+//#define DISABLE_DEBUGLOG
+
+
+#include "./service_file_p.h"
+
+#include <gwenhywfar/misc.h>
+#include <gwenhywfar/debug.h>
+
+
+
+/* ------------------------------------------------------------------------------------------------
+ * defs and enums
+ * ------------------------------------------------------------------------------------------------
+ */
+
+#define AQH_SERVICE_FILE_GROUP_USERS    "users"
+#define AQH_SERVICE_FILE_GROUP_MODULES  "modules"
+#define AQH_SERVICE_FILE_GROUP_SESSIONS "sessions"
+
+
+/* ------------------------------------------------------------------------------------------------
+ * global vars
+ * ------------------------------------------------------------------------------------------------
+ */
+
+GWEN_INHERIT(AQH_SERVICE, AQH_SERVICE_FILE)
+
+
+
+/* ------------------------------------------------------------------------------------------------
+ * forward declarations
+ * ------------------------------------------------------------------------------------------------
+ */
+
+static void GWENHYWFAR_CB _freeData(void *bp, void *p);
+
+static AQH_USER *_loadUser(AQH_SERVICE *sv, const char *s);
+static int _saveUser(AQH_SERVICE *sv, AQH_USER *user);
+static int _addUser(AQH_SERVICE *sv, AQH_USER *user);
+static int _delUser(AQH_SERVICE *sv, const char *s);
+static GWEN_STRINGLIST *_listUsers(AQH_SERVICE *sv);
+
+static AQH_MODULE *_loadModule(AQH_SERVICE *sv, const char *s);
+static int _saveModule(AQH_SERVICE *sv, AQH_MODULE *module);
+static int _addModule(AQH_SERVICE *sv, AQH_MODULE *module);
+static int _delModule(AQH_SERVICE *sv, const char *s);
+static GWEN_STRINGLIST *_listModules(AQH_SERVICE *sv);
+
+static AQH_SESSION* _loadSession(AQH_SERVICE *sv, const char *s);
+static int _saveSession(AQH_SERVICE *sv, AQH_SESSION *session);
+static int _addSession(AQH_SERVICE *sv, AQH_SESSION *session);
+static int _delSession(AQH_SERVICE *sv, const char *s);
+static GWEN_STRINGLIST *_listSessions(AQH_SERVICE *sv);
+
+static GWEN_DB_NODE *_loadGroupLocked(AQH_SERVICE *sv, const char *groupName, const char *subGroupName);
+static int _saveGroupLocked(AQH_SERVICE *sv, const char *groupName, const char *subGroupName, GWEN_DB_NODE *db);
+static int _addGroupLocked(AQH_SERVICE *sv, const char *groupName, const char *subGroupName, GWEN_DB_NODE *db);
+static int _deleteGroup(AQH_SERVICE *sv, const char *groupName, const char *subGroupName);
+static GWEN_STRINGLIST *_listGroup(AQH_SERVICE *sv, const char *groupName);
+
+
+
+/* ------------------------------------------------------------------------------------------------
+ * code
+ * ------------------------------------------------------------------------------------------------
+ */
+
+AQH_SERVICE *AQH_ServiceFiles_new(const char *baseFolder)
+{
+  AQH_SERVICE *sv;
+  AQH_SERVICE_FILE *xs;
+  GWEN_BUFFER *dbuf;
+
+  sv=AQH_Service_new();
+  GWEN_NEW_OBJECT(AQH_SERVICE_FILE, xs);
+  GWEN_INHERIT_SETDATA(AQH_SERVICE, AQH_SERVICE_FILE, sv, xs, _freeData);
+  xs->baseFolder=strdup(baseFolder);
+
+  AQH_Service_SetLoadUserFn(sv, _loadUser);
+  AQH_Service_SetSaveUserFn(sv, _saveUser);
+  AQH_Service_SetAddUserFn(sv, _addUser);
+  AQH_Service_SetDelUserFn(sv, _delUser);
+  AQH_Service_SetListUsersFn(sv, _listUsers);
+
+  AQH_Service_SetLoadModuleFn(sv, _loadModule);
+  AQH_Service_SetSaveModuleFn(sv, _saveModule);
+  AQH_Service_SetAddModuleFn(sv, _addModule);
+  AQH_Service_SetDelModuleFn(sv, _delModule);
+  AQH_Service_SetListModulesFn(sv, _listModules);
+
+  AQH_Service_SetLoadSessionFn(sv, _loadSession);
+  AQH_Service_SetSaveSessionFn(sv, _saveSession);
+  AQH_Service_SetAddSessionFn(sv, _addSession);
+  AQH_Service_SetDelSessionFn(sv, _delSession);
+  AQH_Service_SetListSessionsFn(sv, _listSessions);
+
+  dbuf=GWEN_Buffer_new(0, 256, 0, 1);
+  GWEN_Buffer_AppendArgs(dbuf, "dir://%s", baseFolder);
+  DBG_ERROR(NULL, "Creating config mgr \"%s\"", GWEN_Buffer_GetStart(dbuf));
+  xs->configMgr=GWEN_ConfigMgr_Factory(GWEN_Buffer_GetStart(dbuf));
+  if (xs->configMgr==NULL) {
+    DBG_ERROR(NULL, "Error creating config mgr \"%s\"", GWEN_Buffer_GetStart(dbuf));
+    GWEN_Buffer_free(dbuf);
+    AQH_Service_free(sv);
+    return NULL;
+  }
+  GWEN_Buffer_free(dbuf);
+
+  return sv;
+}
+
+
+
+void GWENHYWFAR_CB _freeData(GWEN_UNUSED void *bp, void *p)
+{
+  AQH_SERVICE_FILE *xs;
+
+  xs=(AQH_SERVICE_FILE*) p;
+  GWEN_ConfigMgr_free(xs->configMgr);
+  free(xs->baseFolder);
+  GWEN_FREE_OBJECT(xs);
+}
+
+
+
+AQH_USER *_loadUser(AQH_SERVICE *sv, const char *s)
+{
+  GWEN_DB_NODE *db;
+
+  db=_loadGroupLocked(sv, AQH_SERVICE_FILE_GROUP_USERS, s);
+  if (db) {
+    AQH_USER *user;
+
+    user=AQH_User_fromDb(db);
+    GWEN_DB_Group_free(db);
+    return user;
+  }
+
+  return NULL;
+}
+
+
+
+int _saveUser(AQH_SERVICE *sv, AQH_USER *user)
+{
+  const char *s;
+
+  s=AQH_User_GetAlias(user);
+  if (s && *s) {
+    GWEN_DB_NODE *db;
+    int rv;
+
+    db=GWEN_DB_Group_new(s);
+    rv=AQH_User_toDb(user, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    rv=_saveGroupLocked(sv, AQH_SERVICE_FILE_GROUP_USERS, s, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    GWEN_DB_Group_free(db);
+    return 0;
+  }
+  return GWEN_ERROR_INVALID;
+}
+
+
+
+int _addUser(AQH_SERVICE *sv, AQH_USER *user)
+{
+  const char *s;
+
+  s=AQH_User_GetAlias(user);
+  if (s && *s) {
+    GWEN_DB_NODE *db;
+    int rv;
+
+    db=GWEN_DB_Group_new(s);
+    rv=AQH_User_toDb(user, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    rv=_addGroupLocked(sv, AQH_SERVICE_FILE_GROUP_USERS, s, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    GWEN_DB_Group_free(db);
+    return 0;
+  }
+  return GWEN_ERROR_INVALID;
+}
+
+
+
+int _delUser(AQH_SERVICE *sv, const char *s)
+{
+  return _deleteGroup(sv, AQH_SERVICE_FILE_GROUP_USERS, s);
+}
+
+
+
+GWEN_STRINGLIST *_listUsers(AQH_SERVICE *sv)
+{
+  return _listGroup(sv, AQH_SERVICE_FILE_GROUP_USERS);
+}
+
+
+
+AQH_MODULE *_loadModule(AQH_SERVICE *sv, const char *s)
+{
+  GWEN_DB_NODE *db;
+
+  db=_loadGroupLocked(sv, AQH_SERVICE_FILE_GROUP_MODULES, s);
+  if (db) {
+    AQH_MODULE *module;
+
+    module=AQH_Module_fromDb(db);
+    GWEN_DB_Group_free(db);
+    return module;
+  }
+
+  return NULL;
+}
+
+
+
+int _saveModule(AQH_SERVICE *sv, AQH_MODULE *module)
+{
+  const char *s;
+
+  s=AQH_Module_GetName(module);
+  if (s && *s) {
+    GWEN_DB_NODE *db;
+    int rv;
+
+    db=GWEN_DB_Group_new(s);
+    rv=AQH_Module_toDb(module, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    rv=_saveGroupLocked(sv, AQH_SERVICE_FILE_GROUP_MODULES, s, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    GWEN_DB_Group_free(db);
+    return 0;
+  }
+  return GWEN_ERROR_INVALID;
+}
+
+
+
+int _addModule(AQH_SERVICE *sv, AQH_MODULE *module)
+{
+  const char *s;
+
+  s=AQH_Module_GetName(module);
+  if (s && *s) {
+    GWEN_DB_NODE *db;
+    int rv;
+
+    db=GWEN_DB_Group_new(s);
+    rv=AQH_Module_toDb(module, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    rv=_addGroupLocked(sv, AQH_SERVICE_FILE_GROUP_MODULES, s, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    GWEN_DB_Group_free(db);
+    return 0;
+  }
+  return GWEN_ERROR_INVALID;
+}
+
+
+
+int _delModule(AQH_SERVICE *sv, const char *s)
+{
+  return _deleteGroup(sv, AQH_SERVICE_FILE_GROUP_MODULES, s);
+}
+
+
+
+GWEN_STRINGLIST *_listModules(AQH_SERVICE *sv)
+{
+  return _listGroup(sv, AQH_SERVICE_FILE_GROUP_MODULES);
+}
+
+
+
+
+AQH_SESSION* _loadSession(AQH_SERVICE *sv, const char *s)
+{
+  GWEN_DB_NODE *db;
+
+  db=_loadGroupLocked(sv, AQH_SERVICE_FILE_GROUP_SESSIONS, s);
+  if (db) {
+    AQH_SESSION *session;
+
+    session=AQH_Session_fromDb(db);
+    GWEN_DB_Group_free(db);
+    return session;
+  }
+
+  return NULL;
+}
+
+
+
+int _saveSession(AQH_SERVICE *sv, AQH_SESSION *session)
+{
+  const char *s;
+
+  s=AQH_Session_GetUid(session);
+  if (s && *s) {
+    GWEN_DB_NODE *db;
+    int rv;
+
+    db=GWEN_DB_Group_new(s);
+    rv=AQH_Session_toDb(session, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    rv=_saveGroupLocked(sv, AQH_SERVICE_FILE_GROUP_SESSIONS, s, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    GWEN_DB_Group_free(db);
+    return 0;
+  }
+  return GWEN_ERROR_INVALID;
+}
+
+
+
+int _addSession(AQH_SERVICE *sv, AQH_SESSION *session)
+{
+  const char *s;
+
+  s=AQH_Session_GetUid(session);
+  if (s && *s) {
+    GWEN_DB_NODE *db;
+    int rv;
+
+    db=GWEN_DB_Group_new(s);
+    rv=AQH_Session_toDb(session, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    rv=_addGroupLocked(sv, AQH_SERVICE_FILE_GROUP_SESSIONS, s, db);
+    if (rv<0) {
+      DBG_ERROR(NULL, "here (%d)", rv);
+      GWEN_DB_Group_free(db);
+      return rv;
+    }
+    GWEN_DB_Group_free(db);
+    return 0;
+  }
+  return GWEN_ERROR_INVALID;
+}
+
+
+
+int _delSession(AQH_SERVICE *sv, const char *s)
+{
+  return _deleteGroup(sv, AQH_SERVICE_FILE_GROUP_SESSIONS, s);
+}
+
+
+
+GWEN_STRINGLIST *_listSessions(AQH_SERVICE *sv)
+{
+  return _listGroup(sv, AQH_SERVICE_FILE_GROUP_SESSIONS);
+}
+
+
+
+GWEN_DB_NODE *_loadGroupLocked(AQH_SERVICE *sv, const char *groupName, const char *subGroupName)
+{
+  if (sv && groupName && subGroupName) {
+    AQH_SERVICE_FILE *xs;
+
+    xs=GWEN_INHERIT_GETDATA(AQH_SERVICE, AQH_SERVICE_FILE, sv);
+    if (xs) {
+      GWEN_DB_NODE *db=NULL;
+      int rv;
+
+      rv=GWEN_ConfigMgr_LockGroup(xs->configMgr, groupName, subGroupName);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error locking group \"%s/%s\": %d", groupName, subGroupName, rv);
+	return NULL;
+      }
+      rv=GWEN_ConfigMgr_GetGroup(xs->configMgr, groupName, subGroupName, &db);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error reading group \"%s/%s\": %d", groupName, subGroupName, rv);
+	GWEN_ConfigMgr_UnlockGroup(xs->configMgr, groupName, subGroupName);
+	return NULL;
+      }
+      rv=GWEN_ConfigMgr_UnlockGroup(xs->configMgr, groupName, subGroupName);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error unlocking group \"%s/%s\": %d", groupName, subGroupName, rv);
+	GWEN_DB_Group_free(db);
+	return NULL;
+      }
+      return db;
+    }
+  }
+  return NULL;
+}
+
+
+
+int _saveGroupLocked(AQH_SERVICE *sv, const char *groupName, const char *subGroupName, GWEN_DB_NODE *db)
+{
+  if (sv && groupName && subGroupName && db) {
+    AQH_SERVICE_FILE *xs;
+
+    xs=GWEN_INHERIT_GETDATA(AQH_SERVICE, AQH_SERVICE_FILE, sv);
+    if (xs) {
+      GWEN_DB_NODE *db=NULL;
+      int rv;
+
+      rv=GWEN_ConfigMgr_LockGroup(xs->configMgr, groupName, subGroupName);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error locking group \"%s/%s\": %d", groupName, subGroupName, rv);
+	return rv;
+      }
+
+      rv=GWEN_ConfigMgr_SetGroup(xs->configMgr, groupName, subGroupName, db);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error writing group \"%s/%s\": %d", groupName, subGroupName, rv);
+	return rv;
+      }
+
+      rv=GWEN_ConfigMgr_UnlockGroup(xs->configMgr, groupName, subGroupName);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error unlocking group \"%s/%s\": %d", groupName, subGroupName, rv);
+	GWEN_DB_Group_free(db);
+	return rv;
+      }
+
+      return 0;
+    }
+  }
+  return GWEN_ERROR_INVALID;
+}
+
+
+
+int _addGroupLocked(AQH_SERVICE *sv, const char *groupName, const char *subGroupName, GWEN_DB_NODE *db)
+{
+  if (sv && groupName && subGroupName && db) {
+    AQH_SERVICE_FILE *xs;
+
+    xs=GWEN_INHERIT_GETDATA(AQH_SERVICE, AQH_SERVICE_FILE, sv);
+    if (xs) {
+      GWEN_DB_NODE *db=NULL;
+      int rv;
+
+      rv=GWEN_ConfigMgr_HasGroup(xs->configMgr, groupName, subGroupName);
+      if (rv>=0) {
+	DBG_ERROR(NULL, "Group \"%s/%s\" already exists", groupName, subGroupName);
+	return GWEN_ERROR_FOUND;
+      }
+
+      rv=GWEN_ConfigMgr_LockGroup(xs->configMgr, groupName, subGroupName);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error locking group \"%s/%s\": %d", groupName, subGroupName, rv);
+	return rv;
+      }
+
+      rv=GWEN_ConfigMgr_SetGroup(xs->configMgr, groupName, subGroupName, db);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error writing group \"%s/%s\": %d", groupName, subGroupName, rv);
+	return rv;
+      }
+
+      rv=GWEN_ConfigMgr_UnlockGroup(xs->configMgr, groupName, subGroupName);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error unlocking group \"%s/%s\": %d", groupName, subGroupName, rv);
+	GWEN_DB_Group_free(db);
+	return rv;
+      }
+
+      return 0;
+    }
+  }
+  return GWEN_ERROR_INVALID;
+}
+
+
+
+int _deleteGroup(AQH_SERVICE *sv, const char *groupName, const char *subGroupName)
+{
+  if (sv && groupName && subGroupName) {
+    AQH_SERVICE_FILE *xs;
+
+    xs=GWEN_INHERIT_GETDATA(AQH_SERVICE, AQH_SERVICE_FILE, sv);
+    if (xs) {
+      int rv;
+
+      rv=GWEN_ConfigMgr_DeleteGroup(xs->configMgr, groupName, subGroupName);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error writing group \"%s/%s\": %d", groupName, subGroupName, rv);
+	return rv;
+      }
+      return 0;
+    }
+  }
+  return GWEN_ERROR_INVALID;
+}
+
+
+
+GWEN_STRINGLIST *_listGroup(AQH_SERVICE *sv, const char *groupName)
+{
+  if (sv && groupName) {
+    AQH_SERVICE_FILE *xs;
+
+    xs=GWEN_INHERIT_GETDATA(AQH_SERVICE, AQH_SERVICE_FILE, sv);
+    if (xs) {
+      GWEN_STRINGLIST *sl;
+      int rv;
+
+      sl=GWEN_StringList_new();
+      rv=GWEN_ConfigMgr_ListSubGroups(xs->configMgr, groupName, sl);
+      if (rv<0) {
+	DBG_ERROR(NULL, "Error listing group \"%s\": %d", groupName, rv);
+	GWEN_StringList_free(sl);
+	return NULL;
+      }
+      if (GWEN_StringList_Count(sl)==0) {
+	GWEN_StringList_free(sl);
+	return NULL;
+      }
+      return sl;
+    }
+  }
+  return NULL;
+}
+
+
diff --git a/apps/aqhome-cgi/service_file.h b/apps/aqhome-cgi/service_file.h
new file mode 100644
index 0000000..8135d5d
--- /dev/null
+++ b/apps/aqhome-cgi/service_file.h
@@ -0,0 +1,20 @@
+/****************************************************************************
+ * This file is part of the project AqHome.
+ * AqHome (c) by 2025 Martin Preuss, all rights reserved.
+ *
+ * The license for this file can be found in the file COPYING which you
+ * should have received along with this file.
+ ****************************************************************************/
+
+#ifndef AQHOME_SERVICE_FILE_H
+#define AQHOME_SERVICE_FILE_H
+
+
+#include "aqhome-cgi/service/service.h"
+
+
+
+
+
+
+#endif
diff --git a/apps/aqhome-cgi/service_file_p.h b/apps/aqhome-cgi/service_file_p.h
new file mode 100644
index 0000000..afee436
--- /dev/null
+++ b/apps/aqhome-cgi/service_file_p.h
@@ -0,0 +1,28 @@
+/****************************************************************************
+ * This file is part of the project AqHome.
+ * AqHome (c) by 2023 Martin Preuss, all rights reserved.
+ *
+ * The license for this file can be found in the file COPYING which you
+ * should have received along with this file.
+ ****************************************************************************/
+
+#ifndef AQHOME_SERVICE_FILE_P_H
+#define AQHOME_SERVICE_FILE_P_H
+
+
+#include "aqhome-cgi/service_file.h"
+
+#include <gwenhywfar/configmgr.h>
+
+
+
+typedef struct AQH_SERVICE_FILE AQH_SERVICE_FILE;
+struct AQH_SERVICE_FILE {
+  char *baseFolder;
+  GWEN_CONFIGMGR *configMgr;
+};
+
+
+
+
+#endif