diff --git a/dev/flake-module.nix b/dev/flake-module.nix
index ff31f41..0cbaa8f 100644
--- a/dev/flake-module.nix
+++ b/dev/flake-module.nix
@@ -122,5 +122,10 @@
       "dev" = { };
     };
   };
+  hercules-ci.cargo-publish = {
+    enable = true;
+    secretName = "crates-io";
+    assertVersions = true;
+  };
   flake = { };
 }