diff --git a/src/appconfig.c b/src/appconfig.c
new file mode 100644
index 0000000..f7f812e
--- /dev/null
+++ b/src/appconfig.c
@@ -0,0 +1,82 @@
+/* Copyright 2016 Alex 'AdUser' Z (ad_user@runbox.com)
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+#include "common.h"
+#include "log.h"
+#include "config.h"
+#include "appconfig.h"
+
+f2b_appconfig_t appconfig = {
+  .daemon = false,
+  .csock = -1,
+  .uid = 0,
+  .gid = 0,
+  .logdest = "file",
+  .config_path   = "/etc/f2b/f2b.conf",
+  .logfile_path  = "/var/log/f2b.log",
+  .csocket_path  = DEFAULT_CSOCKET_PATH,
+  .pidfile_path  = DEFAULT_PIDFILE_PATH,
+  .statedir_path = DEFAULT_STATEDIR_PATH,
+};
+
+void
+f2b_appconfig_update(f2b_config_section_t *section) {
+  f2b_config_param_t *pa, *pb;
+
+  if (!section)
+    return;
+
+  /* set uid & gid. note: set only once if root */
+  if (appconfig.uid == 0 && (pa = f2b_config_param_find(section->param, "user")) != NULL) {
+    struct passwd *pw;
+    if ((pw = getpwnam(pa->value)) != NULL)
+      appconfig.uid = pw->pw_uid, appconfig.gid = pw->pw_gid;
+  }
+  if (appconfig.gid == 0 && (pa = f2b_config_param_find(section->param, "group")) != NULL) {
+    struct group *grp;
+    if ((grp = getgrnam(pa->value)) != NULL)
+      appconfig.gid = grp->gr_gid;
+  }
+
+  if (appconfig.daemon == false && (pa = f2b_config_param_find(section->param, "daemon")) != NULL) {
+    if (strcmp(pa->value, "yes") == 0)
+      appconfig.daemon = true;
+  }
+
+  if ((pa = f2b_config_param_find(section->param, "pidfile")) != NULL)
+    strlcpy(appconfig.pidfile_path, pa->value, sizeof(appconfig.pidfile_path));
+
+  if ((pa = f2b_config_param_find(section->param, "csocket")) != NULL)
+    strlcpy(appconfig.csocket_path, pa->value, sizeof(appconfig.csocket_path));
+
+  if ((pa = f2b_config_param_find(section->param, "statedir")) != NULL)
+    strlcpy(appconfig.statedir_path, pa->value, sizeof(appconfig.statedir_path));
+
+  /* setup logging */
+  if ((pa = f2b_config_param_find(section->param, "loglevel")) != NULL)
+    f2b_log_set_level(pa->value);
+
+  pa = f2b_config_param_find(section->param, "logdest");
+  pb = f2b_config_param_find(section->param, "logfile");
+  if (pa) {
+    strlcpy(appconfig.logdest, pa->value, sizeof(appconfig.logdest));
+    if (!appconfig.daemon && strcmp(pa->value, "stderr") == 0) {
+      f2b_log_to_stderr();
+    } else if (strcmp(pa->value, "file") == 0) {
+      if (pb && *pb->value != '\0') {
+        strlcpy(appconfig.logfile_path, pb->value, sizeof(appconfig.logfile_path));
+        f2b_log_to_file(appconfig.logfile_path);
+      } else {
+        f2b_log_msg(log_warn, "you must set 'logfile' option with 'logdest = file'");
+        f2b_log_to_syslog();
+      }
+    } else {
+      f2b_log_to_syslog();
+    }
+  }
+
+  /* TODO: */
+}
diff --git a/src/appconfig.h b/src/appconfig.h
new file mode 100644
index 0000000..54cd89b
--- /dev/null
+++ b/src/appconfig.h
@@ -0,0 +1,30 @@
+/* Copyright 2016 Alex 'AdUser' Z (ad_user@runbox.com)
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License version 2 as
+ * published by the Free Software Foundation.
+ */
+#ifndef F2B_APPCONFIG_H_
+#define F2B_APPCONFIG_H_
+
+#include <pwd.h>
+#include <grp.h>
+
+typedef struct f2b_appconfig_t {
+  bool daemon;
+  uid_t uid;
+  gid_t gid;
+  int csock;
+  char logdest[CONFIG_KEY_MAX];
+  char config_path[PATH_MAX];
+  char logfile_path[PATH_MAX];
+  char csocket_path[PATH_MAX];
+  char pidfile_path[PATH_MAX];
+  char statedir_path[PATH_MAX];
+} f2b_appconfig_t;
+
+extern f2b_appconfig_t appconfig;
+
+void f2b_appconfig_update(f2b_config_section_t *section);
+
+#endif /* F2B_APPCONFIG_H_ */