diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
new file mode 100644
index 0000000..93ab6db
--- /dev/null
+++ b/.github/workflows/main.yml
@@ -0,0 +1,50 @@
+name: CI
+
+on: [push]
+
+jobs:
+    build:
+        env:
+          HUGO_VERSION: ${{ github.sha }}
+          TZ: Asia/Shanghai
+        runs-on: docker
+        
+        steps:
+            - name: Git checkout
+              uses: actions/checkout@v4
+              with:
+                fetch-depth: 0
+                submodules: true
+            
+            - name: Set git config core.quotepath false # https://github.com/gohugoio/hugo/issues/9810#issuecomment-1107519804
+              run: git config --global core.quotepath false
+  
+            - name: Use Node.js
+              uses: actions/setup-node@v4
+              with:
+                node-version: '21.x'
+                
+            - name: Install Theme
+              run: cd themes/kb-one-de-theme && yarn install --production
+                
+            - name: Install PostCSS-CLI
+              run: npm install postcss-cli -g
+
+            - name: Setup hugo
+              uses: https://github.com/peaceiris/actions-hugo@v2
+              with:
+                hugo-version: '0.123.8'
+                extended: true
+
+            - name: Build Hugo
+              run: echo "HUGO_VERSION -> $HUGO_VERSION" && hugo --gc --minify --cleanDestinationDir
+
+            - name: Hugo-Encrypt
+              run: cd themes/kb-one-de-theme && node ./hugo-encrypt.js
+
+            - name: Upload Artifacts
+              if: ${{ true }}
+              uses: actions/upload-artifact@v3
+              with:
+                name: public
+                path: ./public/
diff --git a/.gitmodules b/.gitmodules
index 71cd6c8..d378848 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,4 +1,4 @@
 [submodule "themes/kb-one-de-theme"]
 	path = themes/kb-one-de-theme
-	url = ssh://git@git.kb-one.de:9522/kb01/kb-one-de-theme.git
+	url = https://git.kb-one.de/kb01/kb-one-de-theme
 	branch = kb-one-edit
diff --git a/shell.nix b/shell.nix
new file mode 100644
index 0000000..0c62133
--- /dev/null
+++ b/shell.nix
@@ -0,0 +1,12 @@
+with import <nixpkgs> {};
+
+stdenv.mkDerivation {
+    name = "node";
+    buildInputs = [
+        nodejs_21
+        hugo
+    ];
+    shellHook = ''
+        export PATH="$PWD/node_modules/.bin/:$PATH"
+    '';
+}
\ No newline at end of file