diff --git a/.github/workflows/nix.yml b/.github/workflows/nix.yml
index d86192c..1ac391b 100644
--- a/.github/workflows/nix.yml
+++ b/.github/workflows/nix.yml
@@ -12,9 +12,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: DeterminateSystems/nix-installer-action@main
-        with:
-          extra-conf: |
-            trusted-substituters = https://gepetto.cachix.org
-            trusted-public-keys = gepetto.cachix.org-1:toswMl31VewC0jGkN6+gOelO2Yom0SOHzPwJMY2XiDY=
       - uses: DeterminateSystems/magic-nix-cache-action@main
-      - run: nix build --accept-flake-config
+      - run: nix --accept-flake-config build -L
+      - run: nix --accept-flake-config run .#cachix push gepetto $(readlink result)
+        env:
+          CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}
diff --git a/flake.nix b/flake.nix
index bdbf5cb..8a4623d 100644
--- a/flake.nix
+++ b/flake.nix
@@ -37,14 +37,17 @@
       perSystem =
         {
           self',
-          system,
           pkgs,
+          system,
           ...
         }:
         {
-          packages.default = pkgs.callPackage ./. {
-            hpp-environments = inputs.hpp-environments.packages.${system}.default;
-            hpp-util = inputs.hpp-util.packages.${system}.default;
+          packages = {
+            inherit (pkgs) cachix;
+            default = pkgs.callPackage ./. {
+              hpp-environments = inputs.hpp-environments.packages.${system}.default;
+              hpp-util = inputs.hpp-util.packages.${system}.default;
+            };
           };
           devShells.default = pkgs.mkShell { inputsFrom = [ self'.packages.default ]; };
         };