diff --git a/.forgejo/workflows/check.yml b/.forgejo/workflows/check.yml
new file mode 100644
index 0000000..f8468e5
--- /dev/null
+++ b/.forgejo/workflows/check.yml
@@ -0,0 +1,21 @@
+on:
+  push:
+    paths:
+    - "**.nix"
+    - "**.lock"
+  workflow_dispatch:
+
+env:
+  NIX_CONFIG: "accept-flake-config = true"
+
+jobs:
+  check:
+    runs-on: "ubuntu-latest"
+
+    steps:
+    - uses: "https://github.com/actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332" # v4.1.7
+    - uses: "https://github.com/DeterminateSystems/flake-checker-action@078f5f7f47ee188aa6cb472527ca5984e195222d" # v9
+    - uses: "https://github.com/DeterminateSystems/nix-installer-action@da36cb69b1c3247ad7a1f931ebfd954a1105ef14" # v14
+    - uses: "https://github.com/DeterminateSystems/magic-nix-cache-action@87b14cf437d03d37989d87f0fa5ce4f5dc1a330b" # v8
+
+    - run: nix flake check --show-trace
diff --git a/flake.nix b/flake.nix
index 7cd038d..d044d56 100644
--- a/flake.nix
+++ b/flake.nix
@@ -40,7 +40,9 @@
           };
         };
 
-        checks = builtins.mapAttrs (_: deployLib: deployLib.deployChecks self.deploy) inputs.deploy-rs.lib;
+        checks = nixpkgs.lib.recursiveUpdate {
+          x86_64-linux.main-node = self.nixosConfigurations.main-node.config.system.build.toplevel;
+        } (builtins.mapAttrs (_: deployLib: deployLib.deployChecks self.deploy) inputs.deploy-rs.lib);
 
         deploy.nodes.main-node = {
           hostname = "winston.sh";