diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
new file mode 100644
index 0000000..d617008
--- /dev/null
+++ b/.gitea/workflows/deploy.yml
@@ -0,0 +1,20 @@
+name: Deploy
+on:
+  push:
+    branches: [main]
+
+# act_runner config: labels = [ubuntu-latest:host, self-hosted:host]
+# host 라벨은 컨테이너 없이 호스트 셸에서 직접 실행 → image pull 0초.
+jobs:
+  deploy:
+    runs-on: self-hosted
+    steps:
+      - name: Trigger webhook
+        run: |
+          set -e
+          HTTP=$(curl -ksS -m 30 -o /tmp/r.json -w "%{http_code}" \
+            -X POST "https://momotogether.com/api/deploy/webhook" \
+            -H "X-Deploy-Token: momo-deploy-2026-secure" -d '{}' || echo "000")
+          echo "HTTP=$HTTP"; cat /tmp/r.json 2>/dev/null || true
+          [ "$HTTP" = "200" ] || { echo "::error::HTTP=$HTTP"; exit 1; }
+          echo "::notice::✔ deploy 트리거 (운영 deployer 가 ~60초 안에 반영)"