diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index cee217c..92b5ba9 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -16,3 +16,12 @@ jobs:
         with:
           name: hsa
           path: hsa
+      - name: Deploy
+        if: startsWith(github.ref, 'refs/tags/')
+        run: |
+          echo "${{ secrets.FORGEJO_SSH }}" > /tmp/deploy_key
+          chmod 600 /tmp/deploy_key
+          DEST=hsa-app-V${{ github.ref_name }}
+          ssh -i /tmp/deploy_key -o StrictHostKeyChecking=no ${{ vars.HSA_APP_USER }}@${{ vars.HSA_APP_HOST }} "mkdir -p $DEST"
+          scp -i /tmp/deploy_key -o StrictHostKeyChecking=no hsa ${{ vars.HSA_APP_USER }}@${{ vars.HSA_APP_HOST }}:$DEST/hsa
+          rm /tmp/deploy_key