diff --git a/codemagic.yaml b/codemagic.yaml
new file mode 100644
index 0000000..a0ce418
--- /dev/null
+++ b/codemagic.yaml
@@ -0,0 +1,40 @@
+workflows:
+  ios-app-store:
+    name: Kasztelan iOS App Store
+    instance_type: mac_mini_m2
+    max_build_duration: 60
+    integrations:
+      app_store_connect: Kasztelan
+    environment:
+      groups:
+        - kasztelan_secrets
+      ios_signing:
+        distribution_type: app_store
+        bundle_identifier: uk.co.kasztelan.app.ios
+      vars:
+        XCODE_PROJECT: "Kasztelan.xcodeproj"
+        XCODE_SCHEME: "Kasztelan"
+      xcode: latest
+    scripts:
+      - name: Configure Kasztelan API key
+        script: |
+          set -eu
+          test -n "${KASZTELAN_APP_KEY:-}"
+          umask 077
+          printf 'KASZTELAN_APP_KEY = %s\n' "$KASZTELAN_APP_KEY" > Config/Secrets.xcconfig
+      - name: Configure App Store signing
+        script: xcode-project use-profiles
+      - name: Build signed IPA
+        script: |
+          xcode-project build-ipa \
+            --project "$CM_BUILD_DIR/$XCODE_PROJECT" \
+            --scheme "$XCODE_SCHEME"
+    artifacts:
+      - build/ios/ipa/*.ipa
+      - /tmp/xcodebuild_logs/*.log
+      - $HOME/Library/Developer/Xcode/DerivedData/**/Build/**/*.dSYM
+    publishing:
+      app_store_connect:
+        auth: integration
+        submit_to_testflight: false
+        submit_to_app_store: false