diff --git a/.forgejo/workflows/generate-tarball.yml b/.forgejo/workflows/generate-tarball.yml
new file mode 100644
index 0000000000..70fbe55b1f
--- /dev/null
+++ b/.forgejo/workflows/generate-tarball.yml
@@ -0,0 +1,60 @@
+on:
+  workflow_dispatch:
+    inputs:
+      ref_name:
+        description: 'Tag or commit'
+        required: true
+        type: string
+
+  push:
+    tags:
+      - '*'
+
+jobs:
+  build-tarball:
+    name: Build tarball w/ submodules
+    runs-on: x86_64
+    container:
+      image: alpine:latest
+    env:
+      CI_PROJECT_NAME: zotero
+    steps:
+      - name: Environment setup
+        run: apk add nodejs git git-archive-all gzip
+      - name: Repo pull
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 500
+          ref: ${{ inputs.ref_name }}
+      - name: Package build
+        run: |
+          if test $GITHUB_REF_NAME == "ci" ; then
+            CI_REF_NAME=${{ inputs.ref_name }}
+          else
+            CI_REF_NAME=$GITHUB_REF_NAME
+          fi
+          echo "CI_REF_NAME=$CI_REF_NAME" >> $GITHUB_OUTPUT
+          echo "building tarball for $CI_REF_NAME"
+          git-archive-all --force-submodules $CI_PROJECT_NAME-$CI_REF_NAME.tar.gz
+          echo "Generating sha512sum"
+          sha512sum $CI_PROJECT_NAME-$CI_REF_NAME.tar.gz > $CI_PROJECT_NAME-$CI_REF_NAME.tar.gz.sha512sum
+      - name: Package upload
+        uses: forgejo/upload-artifact@v3
+        with:
+          name: tarball
+          path: zotero-*.tar*
+  upload-tarball:
+    name: Upload to generic repo
+    runs-on: x86_64
+    needs: [build-tarball]
+    container:
+      image: alpine:latest
+    steps:
+      - name: Environment setup
+        run: apk add nodejs curl
+      - name: Package download
+        uses: forgejo/download-artifact@v3
+      - name: Package deployment 
+        run: |
+          curl --user ${{ vars.CODE_FORGEJO_USER }}:${{ secrets.CODE_FORGEJO_TOKEN }} --upload-file ./tarball/zotero-*.tar.gz ${{ github.server_url }}/api/packages/mirrors/generic/zotero/$CI_REF_NAME/zotero-$CI_REF_NAME.tar.gz
+          curl --user ${{ vars.CODE_FORGEJO_USER }}:${{ secrets.CODE_FORGEJO_TOKEN }} --upload-file ./tarball/zotero-*.tar.gz.sha512sum ${{ github.server_url }}/api/packages/mirrors/generic/zotero/$CI_REF_NAME/zotero-$CI_REF_NAME.tar.gz.sha512sum
diff --git a/.forgejo/workflows/mirror-repository.yml b/.forgejo/workflows/mirror-repository.yml
new file mode 100644
index 0000000000..e60fe6f5c3
--- /dev/null
+++ b/.forgejo/workflows/mirror-repository.yml
@@ -0,0 +1,50 @@
+on:
+  workflow_dispatch:
+
+  schedule:
+    - cron: '@hourly'
+
+jobs:
+  mirror:
+    name: Pull from upstream
+    runs-on: x86_64
+    container:
+      image: alpine:latest
+    env:
+      upstream: https://github.com/zotero/zotero
+      tags: '7.*'
+    steps:
+      - name: Environment setup
+        run: apk add grep git sed coreutils bash nodejs
+      - name: Fetch destination
+        uses: actions/checkout@v4
+        with:
+          fetch_depth: 1
+          ref: ci
+          token: ${{ secrets.CODE_FORGEJO_TOKEN }}
+      - name: Missing tag detecting
+        run: |
+          git ls-remote $upstream "refs/tags/$tags" | grep -v '{' | sed 's|.*/||' > upstream_tags
+          git ls-remote ${{ github.server_url}}/${{ github.repository }} "refs/tags/$tags" | grep -v '{' | sed 's|.*/||' > destination_tags
+          cat upstream_tags destination_tags | tr ' ' '\n' | sort | uniq -u > missing_tags
+          echo "Missing tags:"
+          cat missing_tags
+      - name: Missing tag fetch
+        run: |
+          git remote add upstream $upstream
+          while read tag; do
+            git fetch upstream tag $tag --no-tags
+          done < missing_tags
+      - name: Packaging workflow injection
+        run: |
+          while read tag; do
+            git checkout $tag
+            git tag -d $tag
+            git checkout ci -- ./.forgejo
+            git config user.name "forgejo-actions[bot]"
+            git config user.email "dev@ayakael.net"
+            git commit -m 'Inject custom workflow'
+            git tag -a $tag -m $tag
+          done < missing_tags
+      - name: Push to destination
+        run: git push --force origin refs/tags/*:refs/tags/* --tags