diff --git a/flake.nix b/flake.nix
index fa1f48d..8a39770 100644
--- a/flake.nix
+++ b/flake.nix
@@ -137,6 +137,13 @@
       homeConfigurations = mapAttrs (_: s: s.configuration) nixfiles.config.home-manager.homes;
 
       deploy = nixfiles.config.deploy-rs.rendered;
+      herculesCI = {
+        onPush = {
+          default.outputs = {
+            installer = nixfiles.config.nixos.systems.installer.configuration.config.my.buildAs.iso;
+          };
+        };
+      };
     } //
     (eachDefaultSystem (system:
     let
diff --git a/secrets/hercules-cluster-join-token.key.age b/secrets/hercules-cluster-join-token.key.age
new file mode 100644
index 0000000..c9296a9
Binary files /dev/null and b/secrets/hercules-cluster-join-token.key.age differ