diff --git a/.forgejo/workflows/check.yml b/.forgejo/workflows/check.yml
new file mode 100644
index 00000000..89475a43
--- /dev/null
+++ b/.forgejo/workflows/check.yml
@@ -0,0 +1,16 @@
+name: Flake checks
+on: [push]
+
+jobs:
+  Check:
+    runs-on: nix-flakes
+    steps:
+      - name: Check out repository code
+        uses: https://code.forgejo.org/actions/checkout@v4
+      - name: Prepare cachix
+        uses: https://github.com/cachix/cachix-action@v12
+        with:
+          name: pub-solar
+      - name: Run flake checks
+        run: |
+          nix --print-build-logs --verbose --accept-flake-config flake check
diff --git a/hosts/nachtigall/apps/forgejo.nix b/hosts/nachtigall/apps/forgejo.nix
index f2f1e119..08fd9923 100644
--- a/hosts/nachtigall/apps/forgejo.nix
+++ b/hosts/nachtigall/apps/forgejo.nix
@@ -78,6 +78,11 @@
       session = {
         COOKIE_SECURE = lib.mkForce true;
       };
+      # See https://forgejo.org/docs/latest/admin/actions/
+      actions.ENABLED = true;
+      # In an actions workflow, when uses: does not specify an absolute URL,
+      # the value of DEFAULT_ACTIONS_URL is prepended to it.
+      actions.DEFAULT_ACTIONS_URL = "https://code.forgejo.org";
     };
   };