diff --git a/.forgejo/workflows/mirror.yml b/.forgejo/workflows/mirror.yml
new file mode 100644
index 0000000..7f4005d
--- /dev/null
+++ b/.forgejo/workflows/mirror.yml
@@ -0,0 +1,20 @@
+name: Mirror to GitHub
+
+on:
+  push:
+    branches: ['**']
+    tags: ['**']
+
+jobs:
+  mirror:
+    runs-on: [self-hosted, hestia]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Push to GitHub
+        run: |
+          git remote add github \
+            "https://x-access-token:${{ secrets.GITHUB_MIRROR_TOKEN }}@github.com/Breadway/bread.git"
+          git push github --mirror
diff --git a/.forgejo/workflows/package.yml b/.forgejo/workflows/package.yml
new file mode 100644
index 0000000..919377f
--- /dev/null
+++ b/.forgejo/workflows/package.yml
@@ -0,0 +1,46 @@
+name: Build and publish package
+
+on:
+  push:
+    tags: ['v*']
+
+jobs:
+  package:
+    runs-on: [self-hosted, hestia]
+    container:
+      image: archlinux:latest
+      options: --privileged
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set version
+        run: echo "VERSION=${GITHUB_REF_NAME#v}" >> $GITHUB_ENV
+
+      - name: Install build dependencies
+        run: pacman -Syu --noconfirm base-devel git rust cargo libgit2 openssl
+
+      - name: Create builder user
+        run: useradd -m builder
+
+      - name: Prepare source
+        run: |
+          git archive --format=tar.gz \
+            --prefix=bread-${VERSION}/ \
+            HEAD > packaging/arch/bread-${VERSION}.tar.gz
+          SHA=$(sha256sum packaging/arch/bread-${VERSION}.tar.gz | awk '{print $1}')
+          sed -i "s/^pkgver=.*/pkgver=${VERSION}/" packaging/arch/PKGBUILD
+          sed -i "s/^sha256sums=.*/sha256sums=('${SHA}')/" packaging/arch/PKGBUILD
+          cp -r . /home/builder/src
+          chown -R builder:builder /home/builder/src
+
+      - name: Build package
+        run: su builder -c "cd /home/builder/src/packaging/arch && makepkg -sf --noconfirm"
+
+      - name: Publish to Forgejo registry
+        run: |
+          PKG=$(find /home/builder/src/packaging/arch -name '*.pkg.tar.zst' | head -1)
+          curl -fsS -X PUT \
+            -H "Authorization: token ${{ secrets.FORGEJO_TOKEN }}" \
+            --upload-file "${PKG}" \
+            "https://git.breadway.dev/api/packages/breadway/arch/push?distrib=breadway"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..cacfb7a
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,69 @@
+name: release
+
+on:
+  push:
+    tags: ["v*"]
+
+permissions:
+  contents: write
+
+env:
+  DL_DIR: /srv/breadway-dl
+  ECOSYSTEM_DIR: /home/breadway/Projects/bread-ecosystem
+
+jobs:
+  build:
+    runs-on: [self-hosted, hestia]
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: install build deps
+        run: sudo apt-get install -y libudev-dev libdbus-1-dev pkg-config 2>/dev/null || true
+
+      - name: build
+        run: cargo build --release --locked
+
+      - name: test
+        run: cargo test --release --locked --workspace --lib
+
+      - name: prepare artifacts
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+          PKG_DIR="${DL_DIR}/bread/${VERSION}"
+          mkdir -p "${PKG_DIR}"
+          for bin in breadd bread; do
+            cp "target/release/${bin}" "${PKG_DIR}/${bin}-x86_64"
+            strip "${PKG_DIR}/${bin}-x86_64"
+            sha256sum "${PKG_DIR}/${bin}-x86_64" | awk '{print $1}' \
+              > "${PKG_DIR}/${bin}-x86_64.sha256"
+          done
+          cp packaging/systemd/breadd.service "${PKG_DIR}/"
+          cp bakery.toml "${PKG_DIR}/bakery.toml"
+          ln -sfn "${VERSION}" "${DL_DIR}/bread/latest"
+
+      - name: ensure bread-ecosystem
+        run: |
+          if [[ -d "${ECOSYSTEM_DIR}/.git" ]]; then
+            git -C "${ECOSYSTEM_DIR}" pull --ff-only
+          else
+            mkdir -p "$(dirname "${ECOSYSTEM_DIR}")"
+            git clone https://github.com/Breadway/bread-ecosystem.git "${ECOSYSTEM_DIR}"
+          fi
+
+      - name: regenerate index.json
+        run: bash "${ECOSYSTEM_DIR}/scripts/gen-index.sh"
+
+      - name: upload to GitHub Release
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+          PKG_DIR="${DL_DIR}/bread/${VERSION}"
+          gh release create "${GITHUB_REF_NAME}" \
+            --title "bread v${VERSION}" --generate-notes 2>/dev/null || true
+          gh release upload "${GITHUB_REF_NAME}" \
+            "${PKG_DIR}/breadd-x86_64" \
+            "${PKG_DIR}/bread-x86_64" \
+            "${PKG_DIR}/breadd-x86_64.sha256" \
+            "${PKG_DIR}/bread-x86_64.sha256" \
+            --clobber
diff --git a/Cargo.lock b/Cargo.lock
index 01f9fde..3f631e4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -293,7 +293,7 @@ dependencies = [
 
 [[package]]
 name = "bread-cli"
-version = "0.6.0"
+version = "0.6.1"
 dependencies = [
  "anyhow",
  "bread-shared",
@@ -311,7 +311,7 @@ dependencies = [
 
 [[package]]
 name = "bread-shared"
-version = "0.6.0"
+version = "0.6.1"
 dependencies = [
  "serde",
  "serde_json",
@@ -319,7 +319,7 @@ dependencies = [
 
 [[package]]
 name = "breadd"
-version = "0.6.0"
+version = "0.6.1"
 dependencies = [
  "anyhow",
  "async-trait",
diff --git a/bakery.toml b/bakery.toml
new file mode 100644
index 0000000..ab782a0
--- /dev/null
+++ b/bakery.toml
@@ -0,0 +1,19 @@
+name = "bread"
+description = "Reactive automation daemon and CLI for Linux desktops"
+binaries = ["breadd", "bread"]
+system_deps = ["systemd-libs", "openssl", "zlib"]
+optional_system_deps = ["bluez", "hyprland"]
+bread_deps = []
+
+[[service]]
+unit = "breadd.service"
+enable = true
+
+[config]
+dir = "~/.config/bread"
+example = "breadd.toml"
+
+[install]
+post_install = [
+    "systemctl --user is-active --quiet breadd || systemctl --user start breadd",
+]
diff --git a/bread-cli/Cargo.toml b/bread-cli/Cargo.toml
index c43d83d..5bdcb14 100644
--- a/bread-cli/Cargo.toml
+++ b/bread-cli/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "bread-cli"
-version = "0.6.0"
+version = "0.6.1"
 edition = "2021"
 
 [[bin]]
diff --git a/bread-shared/Cargo.toml b/bread-shared/Cargo.toml
index 66c3118..aa4fe61 100644
--- a/bread-shared/Cargo.toml
+++ b/bread-shared/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "bread-shared"
-version = "0.6.0"
+version = "0.6.1"
 edition = "2021"
 
 [dependencies]
diff --git a/breadd/Cargo.toml b/breadd/Cargo.toml
index d0c6485..19a3a67 100644
--- a/breadd/Cargo.toml
+++ b/breadd/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "breadd"
-version = "0.6.0"
+version = "0.6.1"
 edition = "2021"
 
 [dependencies]