diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
new file mode 100644
index 0000000..5678b35
--- /dev/null
+++ b/.gitlab-ci.yml
@@ -0,0 +1,16 @@
+stages:
+  - deploy
+
+# deploy-www.sh uses rsync -a (preserves symlinks). www/whitepaper.pdf is a
+# symlink to ../whitepaper/lumbda-whitepaper.pdf inside the repo, which would
+# land broken on the proxy. Resolve it to a real file before rsync'ing.
+deploy:
+  stage: deploy
+  tags: ["proxy.uncloseai.com"]
+  script:
+    - cp -L www/whitepaper.pdf www/whitepaper.pdf.real
+    - mv www/whitepaper.pdf.real www/whitepaper.pdf
+    - echo "{\"commit\":\"$CI_COMMIT_SHA\",\"ref\":\"$CI_COMMIT_REF_NAME\"}" > www/version.json
+    - sudo /usr/local/bin/deploy-www.sh lumbda www
+  rules:
+    - if: '$CI_COMMIT_REF_NAME == "master"'