lock down deps; add example conf