diff --git a/.github/workflows/caddy.yml b/.github/workflows/caddy.yml
new file mode 100644
index 0000000..a8fd5cb
--- /dev/null
+++ b/.github/workflows/caddy.yml
@@ -0,0 +1,18 @@
+name: build caddy
+on:
+  push:
+    paths:
+      - .github/workflows/caddy.yml
+      - caddy.sh
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    container:
+      image: alpine:edge
+    env:
+      BUILDS_S3_ACCESS_KEY_ID: ${{ secrets.BUILDS_S3_ACCESS_KEY_ID }}
+      BUILDS_S3_SECRET_ACCESS_KEY: ${{ secrets.BUILDS_S3_SECRET_ACCESS_KEY }}
+    steps:
+    - uses: actions/checkout@v1
+    - run: sh caddy.sh ${{ github.sha }}
diff --git a/caddy.sh b/caddy.sh
new file mode 100644
index 0000000..4c8ae8c
--- /dev/null
+++ b/caddy.sh
@@ -0,0 +1,10 @@
+. _functions.sh
+
+apk add go
+
+go install github.com/caddyserver/xcaddy/cmd/xcaddy@latest
+
+~/go/bin/xcaddy build \
+	--with github.com/gerolf-vent/caddy-vault-storage
+
+upload ./caddy caddy