diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
new file mode 100644
index 0000000..3b977a7
--- /dev/null
+++ b/.forgejo/workflows/ci.yml
@@ -0,0 +1,39 @@
+name: Build and push Docker image
+
+# Build + push only. The deploy target (kamash-01) is NOT the host the Forgejo
+# runner lives on (Dembian), so the runner cannot `compose up` there — unlike
+# sprzatansko-bot, which is co-located with the runner. Deployment is owned by
+# Ansible (kamnet: playbooks/dyzur-bot.yml), whose systemd unit pulls :latest on
+# (re)start. To roll out a new image after CI: re-run that playbook or
+# `systemctl restart dyzur-bot` on kamash-01.
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build:
+    runs-on: docker
+    container: golang:1.26-alpine
+    steps:
+      - name: Install tools
+        run: apk add --no-cache git docker-cli
+
+      - name: Checkout
+        run: git clone ${{ github.server_url }}/${{ github.repository }} . && git checkout ${{ github.sha }}
+
+      - name: Run tests
+        run: go test ./...
+
+      - name: Log in to container registry
+        run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login git.kambr.pl -u "${{ secrets.REGISTRY_USER }}" --password-stdin
+
+      - name: Build and push
+        run: |
+          docker build \
+            -t git.kambr.pl/kamash/dyzur-bot:latest \
+            -t git.kambr.pl/kamash/dyzur-bot:${{ github.sha }} \
+            .
+          docker push git.kambr.pl/kamash/dyzur-bot:latest
+          docker push git.kambr.pl/kamash/dyzur-bot:${{ github.sha }}
diff --git a/logo.png b/logo.png
new file mode 100644
index 0000000..6a880ab
Binary files /dev/null and b/logo.png differ