diff --git a/.github/actions/install-nix/action.yaml b/.github/actions/install-nix/action.yaml
new file mode 100644
index 0000000..8aa855d
--- /dev/null
+++ b/.github/actions/install-nix/action.yaml
@@ -0,0 +1,22 @@
+name: "Nix setup"
+runs:
+  using: "composite"
+  steps:
+    - uses: DeterminateSystems/nix-installer-action@main
+      with:
+        # Needs to be kept in sync with flake.nix
+        extra-conf: |
+          allow-import-from-derivation = false
+          extra-substituters = https://hyprland.cachix.org
+          extra-substituters = https://cache.garnix.io
+          extra-substituters = https://nix-community.cachix.org
+          extra-substituters = https://hercules-ci.cachix.org
+          extra-substituters = https://nrabulinski.cachix.org
+          extra-substituters = https://cache.nrab.lol/public
+          extra-trusted-public-keys = hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc=
+          extra-trusted-public-keys = cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g=
+          extra-trusted-public-keys = nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
+          extra-trusted-public-keys = hercules-ci.cachix.org-1:ZZeDl9Va+xe9j+KqdzoBZMFJHVQ42Uu/c/1/KMC5Lw0=
+          extra-trusted-public-keys = nrabulinski.cachix.org-1:Q5FD7+1c68uH74CQK66UWNzxhanZW8xcg1LFXxGK8ic=
+          extra-trusted-public-keys = public:wIIyvCTlsk39uwKlBFOuVY+BXrPY3lUNAEpDN4H+O0Q=
+    - uses: DeterminateSystems/magic-nix-cache-action@main
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
new file mode 100644
index 0000000..7b4e174
--- /dev/null
+++ b/.github/workflows/build.yaml
@@ -0,0 +1,12 @@
+name: Build flake
+
+on:
+  push:
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: ./.github/actions/install-nix
+      - run: nix flake check
diff --git a/modules/system/common/hercules.nix b/modules/system/common/hercules.nix
index 0b266d6..c00fb57 100644
--- a/modules/system/common/hercules.nix
+++ b/modules/system/common/hercules.nix
@@ -17,7 +17,7 @@ in {
 
   inherit options;
 
-  config = lib.mkIf config.common.hercules.enable {
+  config = lib.mkIf false /* config.common.hercules.enable */ {
     age.secrets.hercules-token = {
       file = ../../../secrets/hercules-token.age;
       owner = herculesUser;