diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
new file mode 100644
index 00000000..e9abbe8e
--- /dev/null
+++ b/.github/workflows/release.yaml
@@ -0,0 +1,23 @@
+name: release
+on:
+  push:
+    tags:
+      - '*'
+
+jobs:
+  goreleaser:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Unshallow
+        run: git fetch --prune --unshallow
+      - name: Setup Go
+        uses: actions/setup-go@v2
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v2
+        with:
+          version: latest
+          args: release --rm-dist
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 00000000..1521c8b7
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+dist
diff --git a/.goreleaser.yml b/.goreleaser.yml
new file mode 100644
index 00000000..b8c08bd6
--- /dev/null
+++ b/.goreleaser.yml
@@ -0,0 +1,21 @@
+builds:
+  - id: tunnel/localproxy
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - windows
+      - darwin
+    goarch:
+      - amd64
+      - arm64
+    main: ./tunnel/cmd/localproxy/
+    binary: localproxy
+archives:
+  - builds:
+      - tunnel/localproxy
+    name_template: "iot_secure_tunnel_{{ .Binary }}_{{ .Os }}_{{ .Arch }}"
+    files:
+      - none*
+checksum:
+  name_template: 'checksums.txt'