diff --git a/.github/workflows/darwin.yml b/.github/workflows/darwin.yml
deleted file mode 100644
index ce82b8533..000000000
--- a/.github/workflows/darwin.yml
+++ /dev/null
@@ -1,62 +0,0 @@
-name: "darwin"
-
-on:
-  push:
-    branches: [master]
-  workflow_dispatch:
-
-concurrency:
-  group: "darwin"
-  cancel-in-progress: false
-
-jobs:
-  deploy:
-    environment:
-      name: darwin
-    strategy:
-      fail-fast: false
-      matrix:
-        host: [darwin02, darwin03]
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Install Nix
-        uses: cachix/install-nix-action@v24
-        with:
-          extra_nix_config: |
-            accept-flake-config = true
-            experimental-features = nix-command flakes
-      - name: Setup SSH
-        env:
-          SSH_KEY: "${{ secrets.SSH_KEY }}"
-        run: |
-          mkdir -p "$HOME/.ssh"
-          cat >>"$HOME/.ssh/id_ed25519" <<EOF
-          $SSH_KEY
-          EOF
-          chmod 600 "$HOME/.ssh/id_ed25519"
-          cat >>"$HOME/.ssh/known_hosts" <<EOF
-          darwin02.nix-community.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICJqwpMUEl1/iwrBakeDb1rlheXlE5mfDLICVz8w6yi6
-          darwin03.nix-community.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKX7W1ztzAtVXT+NBMITU+JLXcIE5HTEOd7Q3fQNu80S
-          EOF
-          cat >>"$HOME/.ssh/config" <<EOF
-          Host *
-            IdentityFile ~/.ssh/id_ed25519
-            IdentitiesOnly yes
-            User hetzner
-          EOF
-      - name: Deploy
-        run: |
-          ./inv deploy --hosts ${{ matrix.host }}
-      - name: Alert on failure
-        if: ${{ failure() }}
-        run: |
-          curl -XPOST -d '{"msgtype":"m.text", "body":"${{ matrix.host }}: deployment failed"}' \
-            "https://matrix.org/_matrix/client/r0/rooms/!cBybDCkeRlSWfuaFvn:numtide.com/send/m.room.message?access_token=${{ secrets.TOKEN_MATRIX_BOT }}"
-  collect:
-    environment:
-      name: darwin
-    needs: deploy
-    runs-on: ubuntu-latest
-    steps:
-      - run: echo
diff --git a/dev/effect.nix b/dev/effect.nix
new file mode 100644
index 000000000..4169afa2d
--- /dev/null
+++ b/dev/effect.nix
@@ -0,0 +1,36 @@
+{ self, withSystem, ... }:
+{
+  herculesCI = { config, ... }:
+    withSystem "x86_64-linux" ({ hci-effects, lib, ... }:
+      {
+        onPush.default.outputs.effects = {
+          darwin = hci-effects.runIf (lib.hasPrefix "refs/heads/gh-readonly-queue/master/" config.repo.ref)
+            (hci-effects.runNixDarwin
+              {
+                ssh.destination = "hetzner@darwin02.nix-community.org";
+                configuration = self.darwinConfigurations.darwin02;
+                buildOnDestination = true;
+                secretsMap.ssh-deployment = "ssh-deployment";
+                userSetupScript = ''
+                  writeSSHKey ssh-deployment
+                  cat >>~/.ssh/known_hosts <<EOF
+                  darwin02.nix-community.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICJqwpMUEl1/iwrBakeDb1rlheXlE5mfDLICVz8w6yi6
+                  EOF
+                '';
+              }
+              {
+                ssh.destination = "hetzner@darwin03.nix-community.org";
+                configuration = self.darwinConfigurations.darwin03;
+                buildOnDestination = true;
+                secretsMap.ssh-deployment = "ssh-deployment";
+                userSetupScript = ''
+                  writeSSHKey ssh-deployment
+                  cat >>~/.ssh/known_hosts <<EOF
+                  darwin03.nix-community.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKX7W1ztzAtVXT+NBMITU+JLXcIE5HTEOd7Q3fQNu80S
+                  EOF
+                '';
+              });
+        };
+      }
+    );
+}
diff --git a/flake.nix b/flake.nix
index 171bd37b4..b53074f6d 100644
--- a/flake.nix
+++ b/flake.nix
@@ -59,6 +59,7 @@
         imports = [
           inputs.hercules-ci-effects.flakeModule
           inputs.treefmt-nix.flakeModule
+          ./dev/effect.nix
         ];
 
         perSystem = { config, inputs', lib, pkgs, self', system, ... }: