diff --git a/.github/workflows/cachix.yml b/.github/workflows/cachix.yml
new file mode 100644
index 0000000..de35c24
--- /dev/null
+++ b/.github/workflows/cachix.yml
@@ -0,0 +1,21 @@
+name: "Build everything and push to cachix"
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '* */1 * * *'
+  push:
+    branches:
+      - main
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2
+    - uses: cachix/install-nix-action@v12
+      with:
+        nix_path: nixpkgs=channel:nixos-20.09-small
+    - uses: cachix/cachix-action@v8
+      with:
+        name: alarsyo
+        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+    - run: nix-build -E 'let pkgs = import <nixpkgs> { overlays = import ./overlays; }; in with pkgs; [ bitwarden_rs-postgresql bitwarden_rs-vault ]'
diff --git a/configuration.nix b/configuration.nix
index 2bab3cf..037103a 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -137,5 +137,14 @@
   boot.supportedFilesystems = [ "btrfs" ];
 
   nixpkgs.overlays = import ./overlays;
+
+  nix = {
+    binaryCaches = [
+      "https://alarsyo.cachix.org"
+    ];
+    binaryCachePublicKeys = [
+      "alarsyo.cachix.org-1:A6BmcaJek5+ZDWWv3fPteHhPm6U8liS9CbDbmegPfmk="
+    ];
+  };
 }
 
diff --git a/overlays/bitwarden_rs-vault.nix b/overlays/bitwarden_rs-vault.nix
new file mode 100644
index 0000000..47e2cb4
--- /dev/null
+++ b/overlays/bitwarden_rs-vault.nix
@@ -0,0 +1,11 @@
+final: prev:
+{
+  bitwarden_rs-vault = prev.bitwarden_rs-vault.overrideAttrs (drv: rec {
+    version = "2.17.1";
+
+    src = prev.fetchurl {
+      url = "https://github.com/dani-garcia/bw_web_builds/releases/download/v${version}/bw_web_v${version}.tar.gz";
+      sha256 = "1kd21higniszk1na5ag7q4g0l7h6ddl91gpbjbwym28hsbjvxla7";
+    };
+  });
+}
diff --git a/overlays/default.nix b/overlays/default.nix
index 73ef5de..8830ee0 100644
--- a/overlays/default.nix
+++ b/overlays/default.nix
@@ -1,6 +1,8 @@
 let
   bitwarden_rs = import ./bitwarden_rs.nix;
+  bitwarden_rs-vault = import ./bitwarden_rs-vault.nix;
 in
 [
   bitwarden_rs
+  bitwarden_rs-vault
 ]