diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 465dbda..c054629 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -54,6 +54,16 @@ jobs:
       - name: Install dependencies
         run: flutter pub get
 
+      - name: Set up release signing
+        env:
+          KEYSTORE_B64: ${{ secrets.RELEASE_KEYSTORE_BASE64 }}
+          STORE_PASSWORD: ${{ secrets.RELEASE_KEYSTORE_PASSWORD }}
+          KEY_ALIAS: ${{ secrets.RELEASE_KEY_ALIAS }}
+        run: |
+          echo "$KEYSTORE_B64" | base64 -d > android/app/release.jks
+          printf 'storePassword=%s\nkeyPassword=%s\nkeyAlias=%s\nstoreFile=release.jks\n' \
+            "$STORE_PASSWORD" "$STORE_PASSWORD" "$KEY_ALIAS" > android/key.properties
+
       - name: Build release APK
         run: |
           # Derive version from the tag (e.g. v26.03.12 → name=26.03.12 number=260312)
diff --git a/android/.gitignore b/android/.gitignore
index 746e499..0da9a1b 100644
--- a/android/.gitignore
+++ b/android/.gitignore
@@ -10,3 +10,4 @@ GeneratedPluginRegistrant.java
 # Signing secrets — never commit these
 key.properties
 fabled-release-key.jks
+app/release.jks