diff --git a/.gitea/workflows/deploy-production.yml b/.gitea/workflows/deploy-production.yml
new file mode 100644
index 0000000..8bbc6aa
--- /dev/null
+++ b/.gitea/workflows/deploy-production.yml
@@ -0,0 +1,44 @@
+name: Deploy Production
+
+on:
+  workflow_dispatch:
+    inputs:
+      image_sha:
+        description: "Getesteter Commit SHA aus Staging"
+        required: true
+
+jobs:
+  deploy-production:
+    runs-on: francesco
+
+    steps:
+      - name: Login to Docker Hub
+        run: |
+          echo "${{ secrets.DOCKER_TOKEN }}" | docker login \
+            -u "${{ secrets.DOCKER_USERNAME }}" \
+            --password-stdin
+
+      - name: Pull tested image
+        run: |
+          docker pull francesco448/razorpagesmovie:${{ inputs.image_sha }}
+
+      - name: Promote image to Production
+        run: |
+          docker tag \
+            francesco448/razorpagesmovie:${{ inputs.image_sha }} \
+            francesco448/razorpagesmovie:prod
+
+          docker push francesco448/razorpagesmovie:prod
+
+      - name: Configure SSH
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.TRUENAS_SSH_KEY }}" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          ssh-keyscan -H "${{ secrets.TRUENAS_HOST }}" >> ~/.ssh/known_hosts
+
+      - name: Deploy Production
+        run: |
+          ssh -i ~/.ssh/id_ed25519 \
+            "${{ secrets.TRUENAS_USER }}@${{ secrets.TRUENAS_HOST }}" \
+            "midclt call -j app.redeploy razorpages-movie-dev"