diff --git a/hubzilla/addon/g1wallet/config.json.template b/hubzilla/addon/g1wallet/config.json.template
new file mode 100644
index 0000000..0c13df7
--- /dev/null
+++ b/hubzilla/addon/g1wallet/config.json.template
@@ -0,0 +1,6 @@
+{
+  "_note": "Copy to config.json. Do not commit config.json.",
+  "orchestrator_url": "REPLACE — orchestrator base URL, e.g. http://10.0.0.105:8700",
+  "node_token": "REPLACE — shared secret for node-to-orchestrator auth",
+  "g1_rpc_endpoint": "REPLACE — Duniter node RPC over Wireguard, e.g. http://10.0.0.105:9944"
+}
diff --git a/hubzilla/addon/g1wallet/g1wallet.apd b/hubzilla/addon/g1wallet/g1wallet.apd
new file mode 100644
index 0000000..4011987
--- /dev/null
+++ b/hubzilla/addon/g1wallet/g1wallet.apd
@@ -0,0 +1,7 @@
+version: 2
+url: $baseurl/g1wallet
+requires: local_channel
+name: Ğ1 Wallet
+photo: icon:wallet2
+categories: Civic Diagnostics
+desc: Self-sovereign Ğ1 wallet for SASE-verified participants. Key derivation and signing happen in the browser. The platform never touches your keys.
diff --git a/hubzilla/addon/g1wallet/mod_g1wallet.pdl b/hubzilla/addon/g1wallet/mod_g1wallet.pdl
new file mode 100644
index 0000000..1ac8b2c
--- /dev/null
+++ b/hubzilla/addon/g1wallet/mod_g1wallet.pdl
@@ -0,0 +1,15 @@
+[template]default[/template]
+
+[region=aside]
+[widget=g1wallet][/widget]
+[/region]
+
+[region=content]
+$content
+[/region]
+
+[region=right_aside]
+[widget=civicnav][/widget]
+[widget=notifications][/widget]
+[widget=newmember][/widget]
+[/region]