diff --git a/.forgejo/workflows/build.yaml b/.forgejo/workflows/build.yaml
new file mode 100644
index 0000000..3711723
--- /dev/null
+++ b/.forgejo/workflows/build.yaml
@@ -0,0 +1,22 @@
+on: [push]
+jobs:
+  build:
+    runs-on: docker
+    steps:
+      - name: Set up dependencies
+        run: |
+          apt-get update
+          apt-get -y install sudo
+      - name: Install Nix
+        uses: https://github.com/cachix/install-nix-action@v27
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Build
+        run: nix build -L
+      - name: Archive
+        run: tar --zstd --transform 's/^result/password-hash-self-service/' -cvf password-hash-self-service.tar.zstd result/*
+      - name: Upload
+        uses: actions/upload-artifact@v3
+        with:
+          name: password-hash-self-service.tar.zstd
+          path: password-hash-self-service.tar.zstd
diff --git a/password-hash-self-service.tar.zstd b/password-hash-self-service.tar.zstd
new file mode 100644
index 0000000..9fa4e14
Binary files /dev/null and b/password-hash-self-service.tar.zstd differ