diff --git a/.forgejo/workflows/build-deploy.yml b/.forgejo/workflows/build-deploy.yml
new file mode 100644
index 0000000..db98457
--- /dev/null
+++ b/.forgejo/workflows/build-deploy.yml
@@ -0,0 +1,175 @@
+name: Build & Deploy
+
+on:
+  push:
+    branches: [main, nightly, feature/nightly]
+
+env:
+  REGISTRY: 192.168.1.100:3000
+  IMAGE: root/gaming-hub
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    container:
+      image: docker:latest
+      volumes:
+        - /var/run/docker.sock:/var/run/docker.sock
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Determine version and tag
+        id: vars
+        run: |
+          VERSION=$(cat VERSION 2>/dev/null || echo "0.0.0")
+          BRANCH="${GITHUB_REF_NAME}"
+
+          if [ "$BRANCH" = "main" ]; then
+            TAG="main"
+            CHANNEL="stable"
+          elif [ "$BRANCH" = "nightly" ] || [ "$BRANCH" = "feature/nightly" ]; then
+            TAG="nightly"
+            VERSION="${VERSION}-nightly"
+            CHANNEL="nightly"
+          else
+            TAG=$(echo "$BRANCH" | sed 's/\//-/g')
+            VERSION="${VERSION}-dev"
+            CHANNEL="dev"
+          fi
+
+          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+          echo "channel=$CHANNEL" >> "$GITHUB_OUTPUT"
+
+      - name: Build Docker image
+        run: |
+          docker build \
+            --build-arg "VITE_BUILD_CHANNEL=${{ steps.vars.outputs.channel }}" \
+            --build-arg "VITE_APP_VERSION=${{ steps.vars.outputs.version }}" \
+            -t ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ steps.vars.outputs.tag }} \
+            .
+
+          if [ "${{ github.ref_name }}" = "main" ]; then
+            docker tag ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ steps.vars.outputs.tag }} \
+              ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest
+          fi
+
+      - name: Push to registry
+        run: |
+          echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login ${{ env.REGISTRY }} -u root --password-stdin
+          docker push ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ steps.vars.outputs.tag }}
+          if [ "${{ github.ref_name }}" = "main" ]; then
+            docker push ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest
+          fi
+
+  deploy:
+    runs-on: ubuntu-latest
+    needs: build
+    if: github.ref_name == 'main'
+    container:
+      image: docker:latest
+      volumes:
+        - /var/run/docker.sock:/var/run/docker.sock
+    steps:
+      - name: Deploy container
+        run: |
+          DEPLOY_IMAGE="${{ env.REGISTRY }}/${{ env.IMAGE }}:latest"
+          CONTAINER_NAME="gaming-hub"
+
+          echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login ${{ env.REGISTRY }} -u root --password-stdin
+          docker pull "$DEPLOY_IMAGE"
+          docker stop "$CONTAINER_NAME" || true
+          docker rm "$CONTAINER_NAME" || true
+
+          docker run -d \
+            --name "$CONTAINER_NAME" \
+            --network pangolin \
+            --restart unless-stopped \
+            -p 8085:8080 \
+            -e TZ=Europe/Berlin \
+            -e NODE_ENV=production \
+            -e PORT=8080 \
+            -e DATA_DIR=/data \
+            -e SOUNDS_DIR=/data/sounds \
+            -e "NODE_OPTIONS=--dns-result-order=ipv4first" \
+            -e ADMIN_PWD="${{ secrets.GAMING_HUB_ADMIN_PWD }}" \
+            -e PCM_CACHE_MAX_MB=2048 \
+            -e DISCORD_TOKEN_JUKEBOX="${{ secrets.DISCORD_TOKEN_JUKEBOX }}" \
+            -e DISCORD_TOKEN_RADIO="${{ secrets.DISCORD_TOKEN_RADIO }}" \
+            -e DISCORD_TOKEN_NOTIFICATIONS="${{ secrets.DISCORD_TOKEN_NOTIFICATIONS }}" \
+            -e PUBLIC_URL="${{ secrets.PUBLIC_URL }}" \
+            -e STEAM_API_KEY="${{ secrets.STEAM_API_KEY }}" \
+            -v /mnt/cache/appdata/gaming-hub/data:/data:rw \
+            -v /mnt/cache/appdata/dockge/container/jukebox/sounds/:/data/sounds:rw \
+            "$DEPLOY_IMAGE"
+
+          docker ps --filter name="$CONTAINER_NAME"
+          docker image prune -f || true
+
+  electron-build:
+    runs-on: ubuntu-latest
+    needs: deploy
+    if: github.ref_name == 'main'
+    container:
+      image: docker:latest
+      volumes:
+        - /var/run/docker.sock:/var/run/docker.sock
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Build Electron app
+        run: |
+          VERSION=$(cat VERSION 2>/dev/null || echo "0.0.0")
+          CONTAINER_NAME="gaming-hub"
+
+          apk add --no-cache nodejs npm
+          cd electron
+          node -e "
+            const pkg = require('./package.json');
+            pkg.version = '${VERSION}';
+            require('fs').writeFileSync('package.json', JSON.stringify(pkg, null, 2) + '\n');
+          "
+          npm ci --no-audit --no-fund
+          npx electron-forge make --platform win32 --arch x64
+
+          SRC_DIR="out/make/squirrel.windows/x64"
+          docker exec "$CONTAINER_NAME" mkdir -p /data/downloads
+          docker cp "${SRC_DIR}/RELEASES" "${CONTAINER_NAME}:/data/downloads/RELEASES"
+
+          for f in ${SRC_DIR}/*.nupkg; do
+            docker cp "$f" "${CONTAINER_NAME}:/data/downloads/$(basename "$f")"
+          done
+
+          SETUP_EXE=$(ls ${SRC_DIR}/*Setup*.exe 2>/dev/null | head -1)
+          if [ -n "$SETUP_EXE" ]; then
+            docker cp "$SETUP_EXE" "${CONTAINER_NAME}:/data/downloads/GamingHub-Setup.exe"
+          fi
+
+  bump-version:
+    runs-on: ubuntu-latest
+    needs: deploy
+    if: github.ref_name == 'main' && !contains(github.event.head_commit.message, '[skip ci]')
+    container:
+      image: alpine/git:latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.PUSH_TOKEN }}
+
+      - name: Bump patch version
+        run: |
+          git config user.name "Forgejo CI"
+          git config user.email "ci@adriahub.de"
+
+          VERSION=$(cat VERSION)
+          MAJOR=$(echo "$VERSION" | cut -d. -f1)
+          MINOR=$(echo "$VERSION" | cut -d. -f2)
+          PATCH=$(echo "$VERSION" | cut -d. -f3)
+          NEXT_PATCH=$((PATCH + 1))
+          NEXT_VERSION="${MAJOR}.${MINOR}.${NEXT_PATCH}"
+
+          echo "$NEXT_VERSION" > VERSION
+          git add VERSION
+          git commit -m "v${NEXT_VERSION} [skip ci]"
+          git push origin main