diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
new file mode 100644
index 0000000..f8c4152
--- /dev/null
+++ b/.github/workflows/deploy.yml
@@ -0,0 +1,26 @@
+# .github/workflows/deploy.yml
+name: Deploy
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  deploy:
+    runs-on: self-hosted
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Build image
+        run: podman build -t portal:latest .
+
+      - name: Stop old container
+        run: podman stop portal || true && podman rm portal || true
+
+      - name: Start new container
+        run: |
+          podman run -d --name portal \
+            -p 3001:3001 \
+            -v /mnt/volume_nyc3_01/portal/.env:/app/.env:ro \
+            -v /etc/ssl/certs/Digital_Ocean.crt:/etc/ssl/certs/Digital_Ocean.crt:ro \
+            portal:latest