diff --git a/.gitea/workflows/production-deploy.yml b/.gitea/workflows/production-deploy.yml
new file mode 100644
index 0000000..1812323
--- /dev/null
+++ b/.gitea/workflows/production-deploy.yml
@@ -0,0 +1,20 @@
+name: Deploy production stack
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Trigger Portainer Git deployment
+        env:
+          PORTAINER_WEBHOOK_URL: ${{ secrets.PORTAINER_WEBHOOK_URL }}
+        run: |
+          set -eu
+          test -n "$PORTAINER_WEBHOOK_URL"
+          curl --fail --silent --show-error --retry 3 --retry-delay 5 \
+            --request POST "$PORTAINER_WEBHOOK_URL"