diff --git a/.gitea/workflows/cd.yaml b/.gitea/workflows/cd.yaml
index f9cef2c..dc4c85a 100644
--- a/.gitea/workflows/cd.yaml
+++ b/.gitea/workflows/cd.yaml
@@ -1,4 +1,4 @@
-name: Continuous Integration
+name: Continuous Delivery
 
 on:
   push:
@@ -6,7 +6,7 @@ on:
       - "v[0-9]+.[0-9]+.[0-9]+"
 
 jobs:
-  build:
+  build_n_upload:
     runs-on: linux
     steps:
       - name: Git checkout
diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
new file mode 100644
index 0000000..aacd54a
--- /dev/null
+++ b/.gitea/workflows/ci.yaml
@@ -0,0 +1,21 @@
+name: Continuous Integration
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  lint_n_build:
+    runs-on: linux
+    steps:
+      - name: Git checkout
+        uses: actions/checkout@v6
+      - name: Setup python
+        uses: actions/setup-python@v6
+      - name: Install systemdlint
+        run: pip install systemdlint
+      - name: Lint systemd files
+        run: systemdlint files/systemd/certbot-renew.service files/systemd/certbot-renew.timer
+      - name: Lint shell scripts
+        run: shellcheck files/sbin/certbot-renew
diff --git a/files/sbin/certbot_renew b/files/sbin/certbot_renew
index cfa3979..3a9d268 100644
--- a/files/sbin/certbot_renew
+++ b/files/sbin/certbot_renew
@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
 
-sleep $(($RANDOM % 3600));
+sleep $((RANDOM % 3600));
 /opt/certbot/bin/pip install --upgrade certbot certbot-nginx certbot-dns-ovh
 certbot renew --cert-name netoik.io