sysadmin: add setup script