diff --git a/.gitea/deploy.sh b/.gitea/deploy.sh
new file mode 100755
index 0000000..be4eab2
--- /dev/null
+++ b/.gitea/deploy.sh
@@ -0,0 +1,19 @@
+#!/bin/sh
+
+curl \
+--fail-with-body \
+-H "Authorization: ${RUNNER_API_KEY}" \
+-XPOST 192.168.1.186 \
+-H 'Content-Type: application/json; charset=utf-8' \
+--data-binary @- <<EOF
+{
+	"commands": [
+		"git clone --single-branch --branch ${GITHUB_REF_NAME} --depth 1 ssh://git@gitea.larvit.se:21022/pwrpln/auth-api.git",
+		"cd auth-api",
+		"echo \"${DOCKER_PASSWORD}\" | docker login gitea.larvit.se --username ${DOCKER_USERNAME} --password-stdin",
+		"docker pull gitea.larvit.se/pwrpln/auth-api:main",
+		"docker tag gitea.larvit.se/pwrpln/auth-api:main gitea.larvit.se/pwrpln/auth-api:${GITHUB_REF_NAME}",
+		"docker push gitea.larvit.se/pwrpln/auth-api:${GITHUB_REF_NAME}"
+	]
+}
+EOF
diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
new file mode 100644
index 0000000..2942be2
--- /dev/null
+++ b/.gitea/workflows/deploy.yml
@@ -0,0 +1,22 @@
+name: Test and build
+run-name: ${{ gitea.actor }} testing and building
+on:
+  push:
+    tags:
+      - '**'
+
+env:
+  DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+  DOCKER_USERNAME: ${{ vars.DOCKER_USERNAME }}
+  RUNNER_API_KEY: ${{ secrets.RUNNER_API_KEY }}
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          sparse-checkout: |
+            .gitea/deploy.sh
+          sparse-checkout-cone-mode: false
+      - run: .gitea/deploy.sh