diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
new file mode 100644
index 0000000..7353098
--- /dev/null
+++ b/.gitea/workflows/deploy.yml
@@ -0,0 +1,33 @@
+name: Deploy
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  deploy:
+    name: Deploy
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Setup ssh-agent
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+
+      - name: Deploy to remote
+        env:
+          REMOTE_USER: ${{ secrets.REMOTE_USER }}
+          REMOTE_HOST: ${{ secrets.REMOTE_HOST }}
+          REMOTE_PATH: ${{ secrets.REMOTE_PATH }}
+        run: |
+          ssh -o StrictHostKeyChecking=no "$REMOTE_USER"@"$REMOTE_HOST" "mkdir -p \"$REMOTE_PATH\""
+          scp -r ./* "$REMOTE_USER"@"$REMOTE_HOST":"$REMOTE_PATH"
+          ssh "$REMOTE_USER"@"$REMOTE_HOST" "docker compose -f $REMOTE_PATH/compose.yml down"
+          ssh "$REMOTE_USER"@"$REMOTE_HOST" "docker compose -f $REMOTE_PATH/compose.yml pull"
+          ssh "$REMOTE_USER"@"$REMOTE_HOST" "docker compose -f $REMOTE_PATH/compose.yml up -d --force-recreate"
+
diff --git a/compose.yml b/compose.yml
new file mode 100644
index 0000000..966e839
--- /dev/null
+++ b/compose.yml
@@ -0,0 +1,28 @@
+services:
+  duplicati:
+    image: lscr.io/linuxserver/duplicati:latest
+    container_name: duplicati
+    restart: unless-stopped
+    environment:
+      - PUID=2011 # duplicati
+      - PGID=2011 # duplicati
+      - TZ=GB
+      - FILE__SETTINGS_ENCRYPTION_KEY=/run/secrets/settings_encryption_key
+    networks:
+      - duplicati_network
+    secrets:
+      - settings_encryption_key
+    ports:
+      - 8200:8200 # Web UI
+    volumes:
+      - ./config:/config:rw
+      - ./source:/source:rw
+      - /mnt/duplicati_backup_1:/backups:rw
+
+networks:
+  duplicati_network:
+    name: duplicati_network
+
+secrets:
+  settings_encryption_key:
+    file: ./settings_encryption_key.bin