diff --git a/hosts/koi/containers/bots/bsky-crossposter/config.ts b/hosts/koi/containers/bots/bsky-crossposter/config.ts
new file mode 100644
index 0000000..4210817
--- /dev/null
+++ b/hosts/koi/containers/bots/bsky-crossposter/config.ts
@@ -0,0 +1,28 @@
+import type { EventHandler } from './src/utils/handler.ts'
+import { assert } from '@fuman/utils'
+import { extractRecordFromEvent } from './src/bluesky/definitions.ts'
+import { getPostThreadgateFor } from './src/bluesky/threadgate.ts'
+import { makeLinkToOriginalPost } from './src/utils/html.ts'
+import { crosspostToTelegram } from './src/utils/telegram.ts'
+
+export const watchedDids = ['did:web:tei.su']
+
+export const handler: EventHandler = async (event) => {
+    if (event.commit.collection !== 'app.bsky.feed.post') return
+
+    // do not crosspost if replies are following-only
+    const threadgate = await getPostThreadgateFor(event)
+    if (threadgate && threadgate.allow.some(it => it.$type === 'app.bsky.feed.threadgate#followingRule')) {
+        return
+    }
+
+    // ignore some posts
+    const post = extractRecordFromEvent(event)
+    assert(post?.$type === 'app.bsky.feed.post')
+    if (post.text.match(/\.$|\b(puppy|pubby)\b/)) return
+
+    await crosspostToTelegram(event, {
+        chatId: -1001432293767, // temp. todo: replace with actual channel
+        finalizeText: text => `${makeLinkToOriginalPost(event, '~')} ${text}`,
+    })
+}
diff --git a/hosts/koi/containers/bots/bsky-crossposter/default.nix b/hosts/koi/containers/bots/bsky-crossposter/default.nix
new file mode 100644
index 0000000..2184402
--- /dev/null
+++ b/hosts/koi/containers/bots/bsky-crossposter/default.nix
@@ -0,0 +1,28 @@
+{ config, ... }:
+
+let 
+  UID = 1120;
+in {
+  desu.secrets.bsky-crossposter-env.owner = "bsky-crossposter";
+
+  users.users.bsky-crossposter = {
+    isNormalUser = true;
+    uid = UID;
+  };
+
+  virtualisation.oci-containers.containers.bsky-crossposter = {
+    image = "ghcr.io/teidesu/bsky-crossposter:latest";
+    environmentFiles = [
+      config.desu.secrets.bsky-crossposter-env.path
+    ];
+    user = builtins.toString UID;
+    extraOptions = [
+      "--mount=type=bind,source=/srv/bsky-crossposter,target=/app/.runtime"
+      "--mount=type=bind,source=${./config.ts},target=/app/config.ts" 
+    ];
+  };
+
+  systemd.tmpfiles.rules = [
+    "d /srv/bsky-crossposter 0700 ${builtins.toString UID} ${builtins.toString UID} -"
+  ];
+}
\ No newline at end of file
diff --git a/secrets/bsky-crossposter-env.age b/secrets/bsky-crossposter-env.age
new file mode 100644
index 0000000..859e912
--- /dev/null
+++ b/secrets/bsky-crossposter-env.age
@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 sj88Xw F3De7q6a36OheceZn2yclnFF0poH+gW4fwyGOTMJc2U
+e/Qi4QG3tljKx9ekNYdc+5rFZRfpnAqPxg1ZRjwkUeY
+--- lh9CvUs/ZSSsn/6KM90YPu8ILa2HyBny3NT5toWGD6c
+r�P/������y>�H5�ͣ�1,��x�Ѕ�9����d^ X��S`h���\+�ӳ�
7٦��؟ڠ�F�Rq6�h����`��
\ No newline at end of file