diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 5d3311f..d768d9f 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -95,3 +95,20 @@ jobs:
       - name: Run tests (web)
         run: cargo test --features web --no-default-features
 
+  # ---------------------------------------------------------------------------
+  # Stage 3: Deploy (only after tests pass, only on main)
+  # ---------------------------------------------------------------------------
+  deploy:
+    name: Deploy
+    runs-on: docker
+    needs: [test]
+    if: github.ref == 'refs/heads/main'
+    container:
+      image: alpine:latest
+    steps:
+      - name: Trigger Coolify deploy
+        run: |
+          apk add --no-cache curl
+          curl -sf "${{ secrets.COOLIFY_WEBHOOK }}" \
+            -H "Authorization: Bearer ${{ secrets.COOLIFY_TOKEN }}"
+