diff --git a/.envrc b/.envrc
index 1d953f4..07b6c96 100644
--- a/.envrc
+++ b/.envrc
@@ -1 +1,2 @@
 use nix
+PATH="$(pwd)/.bin:$PATH"
diff --git a/.gitignore b/.gitignore
index 9faadea..8c10f16 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
+/.bin/fly
 /gitea/backups-*.key
 /gitea/concourse_password
 /gitea/result
diff --git a/gitea/configuration.nix b/gitea/configuration.nix
index 2dbf132..9efa1c5 100644
--- a/gitea/configuration.nix
+++ b/gitea/configuration.nix
@@ -237,6 +237,19 @@ in {
         CONCOURSE_POSTGRES_DATABASE = "concourse";
       };
     };
+
+    concourse-worker = {
+      image = "${concourse-image}";
+      cmd = [ "worker" ];
+      ports = [ "7777:7777" "7788:7788" ];
+      extraDockerOptions = [ "--privileged" "--link=concourse-web" ];
+      volumes = [ "/home/concourse:/home/concourse:ro" ];
+      environment = {
+        CONCOURSE_TSA_HOST = "concourse-web:2222";
+        CONCOURSE_TSA_PUBLIC_KEY = "/home/concourse/tsa_host_key.pub";
+        CONCOURSE_TSA_WORKER_PRIVATE_KEY = "/home/concourse/worker_key";
+      };
+    };
   };
 
   ## backups