diff --git a/.gitignore b/.gitignore
index b0be5f6e..e0ee1151 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,5 @@
-*.pyc
 .idea
+*.pyc
 __pycache__
+Pipfile.lock
 _OUTPUT_
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 00000000..2b2202af
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,25 @@
+# Changelog
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased] - 2019-05-22
+
+## [0.1.0] - 2019-05-22
+Initial release, tentative.
+
+### Added
+- this `CHANGELOG.md`
+- `requirements.txt` and `Pipfile` for better packaging hygiene
+
+### Changed
+- reorganize code layout, move all python into `src/`
+- update README.md to reflect changes
+
+### Removed
+- delete boilerplate `restore_SOMETHING.sh` scripts
+
+
+[Unreleased]: https://github.com/ysde/grafana-backup-tool/compare/v0.1.0...HEAD
+[0.1.0]: https://github.com/ysde/grafana-backup-tool/releases/tag/v0.1.0
diff --git a/Pipfile b/Pipfile
new file mode 100644
index 00000000..ccf8b888
--- /dev/null
+++ b/Pipfile
@@ -0,0 +1,12 @@
+[[source]]
+url = "https://pypi.python.org/simple"
+verify_ssl = true
+name = "pypi"
+
+[packages]
+requests = {extras = ["security"], version = "~=2.21"}
+
+[dev-packages]
+
+[requires]
+# runs with python2.7 or python3.x
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 00000000..c1d34ae8
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1 @@
+requests[security]