diff --git a/Makefile b/Makefile
index e4a4f44a5..346a6c66b 100644
--- a/Makefile
+++ b/Makefile
@@ -21,9 +21,12 @@ test: frontend-test backend-test i18n-check
 backend-%: # .stack-work.lock # --stack-work-$*
 	$(MAKE) -- --backend-$*-dev
 	#( $(MAKE) -- --backend-$* || $(MAKE) -- --stack-krow-$* ) && ( $(MAKE) -- --stack-krow-$* )
-.PHONY: backend-%-prod
-backend-%-prod: # .stack-work.lock # --stack-work-$*
-	$(MAKE) -- --backend-$*
+
+# .PHONY: backend-%-prod # TODO deprecated in favor of bins; remove
+# backend-%-prod: # .stack-work.lock # --stack-work-$*
+# 	$(MAKE) -- --backend-$*
+bin/uniworx:
+	$(MAKE) -- --backend-build-prod
 
 .PHONY: --backend-%-dev
 --backend-%-dev: .develop.env
@@ -58,13 +61,16 @@ database: .stack-work.lock # --stack-work-build
 	$(MAKE) -- --database
 	# ( $(MAKE) -- --database || $(MAKE) -- --stack-krow-build ) && ( $(MAKE) -- --stack-krow-build )
 
+# TODO maybe move to database target?
 .PHONY: --database
---database: .stack-work.lock
-	stack build --fast --flag uniworx:-library-only $(stackopts)
+--database: .stack-work.lock bin/uniworxdb
 	export SERVER_SESSION_ACID_FALLBACK=$${SERVER_SESSION_ACID_FALLBACK:-true}
 	export AVSPASS=$${AVSPASS:-nopasswordset}
 	stack exec uniworxdb -- $(db)
 
+bin/uniworxdb: .stack-work.lock
+	stack build --fast --flag uniworx:-library-only --copy-bins\ --local-bin-path\ $$(pwd)/bin\ --flag\ uniworx:-dev
+
 .PHONY: frontend-%
 frontend-%: node_modules
 	$(MAKE) -- --frontend-$*
@@ -103,6 +109,7 @@ well-known: node_modules
 clean:
 	rm -rf node_modules
 	rm -rf .stack-work .stack-work-build .stack-work-run .stack-work-test .stack-work-doc
+	# TODO remove binaries / bin directory
 
 .PHONY: %.lock
 %.lock: