diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml
new file mode 100644
index 0000000..74976a2
--- /dev/null
+++ b/.forgejo/workflows/deploy.yml
@@ -0,0 +1,18 @@
+name: 'Deploy website to nest'
+author: '9pfs@amcforum.wiki (h @ nest)'
+on:
+  push:
+    branches:
+      - main
+jobs:
+  deploy:
+    runs-on: docker
+    steps:
+      - uses: actions/checkout@v3
+      - id: deploy
+        run: |
+          mkdir ~/.ssh && \
+          echo ${{ secrets.DEPLOY_SSH_KEY}} | base64 -d > ~/.ssh/id_ed25519 && \
+          cat nest-known-hosts-cache.txt > ~/.ssh/known_hosts && \
+          chmod -R go-rwx ~/.ssh && \
+          ssh -T -o UserKnownHostsFile=nest-known-hosts-cache.txt h@hackclub.app
diff --git a/nest-known-hosts-cache.txt b/nest-known-hosts-cache.txt
new file mode 100644
index 0000000..8b7fa9f
--- /dev/null
+++ b/nest-known-hosts-cache.txt
@@ -0,0 +1,8 @@
+# hackclub.app:22 SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2
+hackclub.app ssh-rsa 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
+# hackclub.app:22 SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2
+hackclub.app ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBNzIySdwx0OqVCH8vFBDkQwsWJ4h0mVN1F2Al840f0zuF/5BjF5TQDvlZXlTtT7NpKsBga4tkk4VMnA3lHc8WYY=
+# hackclub.app:22 SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2
+hackclub.app ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ3pezDUZG+4bPRZg2znAuuMp42AL+rc1HGUltnNf8cA
+# hackclub.app:22 SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2
+# hackclub.app:22 SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2