diff --git a/.golangci.yml b/.golangci.yml
new file mode 100644
index 0000000..7dbf626
--- /dev/null
+++ b/.golangci.yml
@@ -0,0 +1,67 @@
+---
+output:
+  sort-results: true
+
+linters-settings:
+  goheader:
+    values:
+      const:
+        ORGANIZATION: CAcert Inc.
+    template: |-
+      Copyright {{ YEAR-RANGE }} {{ ORGANIZATION }}
+      SPDX-License-Identifier: Apache-2.0
+
+      Licensed under the Apache License, Version 2.0 (the "License");
+      you may not use this file except in compliance with the License.
+      You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+      Unless required by applicable law or agreed to in writing, software
+      distributed under the License is distributed on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+      See the License for the specific language governing permissions and
+      limitations under the License.
+  gomnd:
+    ignore-functions:
+      - 'strconv.*'
+  goimports:
+    local-prefixes: git.cacert.org/cacert-goocsp
+  misspell:
+    locale: en-AU
+    ignore-words:
+      - CAcert
+
+linters:
+  disable-all: false
+  enable:
+    - bodyclose
+    - containedctx
+    - contextcheck
+    - cyclop
+    - decorder
+    - errorlint
+    - exportloopref
+    - forbidigo
+    - forcetypeassert
+    - gocognit
+    - goconst
+    - gocritic
+    - gofmt
+    - goheader
+    - goimports
+    - gomnd
+    - gosec
+    - lll
+    - makezero
+    - misspell
+    - nakedret
+    - nestif
+    - nlreturn
+    - nolintlint
+    - predeclared
+    - revive
+    - rowserrcheck
+    - sqlclosecheck
+    - wrapcheck
+    - wsl