diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 9dc951aa..273d278b 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,5 +1,9 @@
 image: archlinux
 
+stages:
+  - test
+  - deploy
+
 cache:
   key: system-v1
   paths:
@@ -15,5 +19,31 @@ before_script:
            python-itsdangerous python-httpx
 
 test:
+  stage: test
   script:
     - make -C test
+
+deploy_dev:
+  stage: deploy
+  environment:
+    name: dev
+    url: https://aur-dev.archlinux.org
+  script: "ssh deployme@aur-dev.archlinux.org"
+  only:
+    - develop
+  resource_group: dev  # Ensure only a single deployment can run per time
+  tags:
+    - secure-general
+
+deploy_production:
+  stage: deploy
+  environment:
+    name: production
+    url: https://aur.archlinux.org
+  script: "ssh deployme@aur.archlinux.org"
+  when: manual
+  only:
+    - master
+  resource_group: production  # Ensure only a single deployment can run per time
+  tags:
+    - secure-general
diff --git a/deploy/deployme.sh b/deploy/deployme.sh
new file mode 100755
index 00000000..160aa34e
--- /dev/null
+++ b/deploy/deployme.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+set -eux
+
+BASEDIR=$(dirname $(readlink -f "$0"))
+cd "$BASEDIR/.."
+echo "=> Deploying in $(pwd)"
+git fetch origin && git reset --hard origin/master
+( cd doc/ && make )
+( cd po/ && make && make install )
+alembic upgrade head