diff --git a/infra/forgejo-ci/configuration.nix b/infra/forgejo-ci/configuration.nix
new file mode 100644
index 00000000..1e9af4f6
--- /dev/null
+++ b/infra/forgejo-ci/configuration.nix
@@ -0,0 +1,57 @@
+{
+  config,
+  lib,
+  ...
+}:
+
+let
+  inherit (lib) mkDefault mkForce;
+in
+{
+  _class = "nixos";
+
+  imports = [
+    ../common/options.nix
+    ../common/nixos
+  ];
+
+  fediversityVm = {
+    # XXX this needs an SSH config entry to locate and access the machine
+    name = "forgejo-ci";
+    domain = "procolix.com";
+
+    ipv4 = {
+      interface = "enp1s0f0";
+      address = "192.168.201.65";
+      prefixLength = 24;
+      gateway = "192.168.201.1";
+    };
+    ipv6.enable = false;
+  };
+
+  networking = {
+    nftables.enable = mkForce false;
+    hostId = "1d6ea552";
+  };
+
+  hardware.cpu.intel.updateMicrocode = mkDefault config.hardware.enableRedistributableFirmware;
+
+  fileSystems."/" = {
+    device = "rpool/root";
+    fsType = "zfs";
+  };
+
+  fileSystems."/home" = {
+    device = "rpool/home";
+    fsType = "zfs";
+  };
+
+  fileSystems."/boot" = {
+    device = "/dev/disk/by-uuid/50B2-DD3F";
+    fsType = "vfat";
+    options = [
+      "fmask=0077"
+      "dmask=0077"
+    ];
+  };
+}