diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
new file mode 100644
index 0000000..445c7c3
--- /dev/null
+++ b/.gitea/workflows/ci.yml
@@ -0,0 +1,35 @@
+name: ci
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  flake:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: cachix/install-nix-action@v31
+        with:
+          extra_nix_config: |
+            experimental-features = nix-command flakes
+            accept-flake-config = true
+
+      - name: format
+        run: nix fmt -- --check
+
+      - name: statix
+        run: nix run nixpkgs#statix -- check .
+
+      - name: evaluate all configurations
+        run: nix flake check --no-build --all-systems
+
+      - name: build packages
+        run: nix build --no-link .#heidisql .#aseprite-thumbnailer-kde
+
+      - name: sops manifests
+        run: |
+          for host in nero vergil pdw-frankiel; do
+            nix build --no-link ".#nixosConfigurations.${host}.config.system.build.sops-nix-manifest"
+          done