diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f9513a9..f892e2f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,3 +32,17 @@ jobs:
           args: release --clean
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  pkgsite:
+    needs: goreleaser
+    runs-on: ubuntu-latest
+    environment: pkg-go-dev
+    permissions: {}
+    steps:
+      - name: Refresh pkg.go.dev
+        env:
+          MODULE: github.com/sbldevnet/cloudflared-proxy
+          VERSION: ${{ github.ref_name }}
+        run: |
+          curl -fsS "https://proxy.golang.org/${MODULE}/@v/${VERSION}.info"
+          curl -fsS -X POST "https://pkg.go.dev/fetch/${MODULE}@${VERSION}"
diff --git a/README.md b/README.md
index af55523..75b6fa6 100644
--- a/README.md
+++ b/README.md
@@ -3,6 +3,8 @@
 ![logo](./img/logo.png#gh-light-mode-only)
 ![logo](./img/logo_dark.png#gh-dark-mode-only)
 
+[![Go Reference](https://pkg.go.dev/badge/github.com/sbldevnet/cloudflared-proxy.svg)](https://pkg.go.dev/github.com/sbldevnet/cloudflared-proxy)
+
 A flexible reverse proxy for Cloudflare Access applications.
 
 This tool allows you to proxy multiple Cloudflare Access protected applications to your local machine, with easy configuration via command-line flags or a configuration file.
diff --git a/main.go b/main.go
index 85b1a0d..9921d1f 100644
--- a/main.go
+++ b/main.go
@@ -1,3 +1,13 @@
+// Command cloudflared-proxy runs local reverse proxies to Cloudflare Access
+// applications, authenticating through cloudflared.
+//
+// Usage:
+//
+//	cloudflared-proxy [flags]
+//
+// To use it as a library, see the packages
+// [github.com/sbldevnet/cloudflared-proxy/proxy] and
+// [github.com/sbldevnet/cloudflared-proxy/config].
 package main
 
 import (