diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
new file mode 100644
index 0000000..0f57112
--- /dev/null
+++ b/.gitea/workflows/ci.yml
@@ -0,0 +1,73 @@
+name: ci
+
+on:
+  push:
+    branches:
+      - "main"
+
+env:
+  APP_NAME: aws-dodo
+  REGISTRY_URL: registry.bboysoul.cn
+  IMAGE_NAME: registry.bboysoul.cn/dodo
+  GIT_EMAIL: bboysoulcn@gmail.com
+  GIT_USER: bboysoul
+  YAML_REPO: git.bboysoul.cn/bboysoul/kubernetes-yaml
+  YAML_PATH: kubernetes-yaml/aws-k8s/dodo
+  ARGOCD_USER: admin
+  ARGOCD_URL: argocd.bboysoul.cn
+
+jobs:
+  docker:
+    runs-on: docker
+    container:
+      options: --user=root
+    steps:
+      - name: Set up Docker Buildx
+        uses: https://github.com/docker/setup-buildx-action@v2
+
+      - name: Login to Docker Registry
+        uses: https://github.com/docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY_URL }}
+          username: ${{ secrets.REGISTRY_USER }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+
+      - name: Build and push
+        uses: https://github.com/docker/build-push-action@v6
+        with:
+          push: true
+          tags: |
+            ${{ env.IMAGE_NAME }}:latest
+            ${{ env.IMAGE_NAME }}:${{ gitea.sha }}
+          cache-from: type=registry,ref=${{ env.IMAGE_NAME }}:buildcache
+          cache-to: type=registry,ref=${{ env.IMAGE_NAME }}:buildcache,mode=max
+
+      - name: Update kustomize image
+        run: |
+          git config --global user.email "${{ env.GIT_EMAIL }}"
+          git config --global user.name "${{ env.GIT_USER }}"
+          git clone https://${{ env.GIT_USER }}:${{ secrets.CI_GIT_TOKEN }}@${{ env.YAML_REPO }}.git
+          cd ${{ env.YAML_PATH }}
+          kustomize edit set image ${{ env.IMAGE_NAME }}:${{ gitea.sha }}
+          git add .
+          git commit -m "set image ${{ env.IMAGE_NAME }}:${{ gitea.sha }}"
+          git push
+
+      - name: Install ArgoCD CLI
+        run: |
+          curl -sSL -o /usr/local/bin/argocd \
+            https://github.com/argoproj/argo-cd/releases/latest/download/argocd-linux-amd64
+          chmod +x /usr/local/bin/argocd
+
+      - name: ArgoCD sync
+        run: |
+          argocd login ${{ env.ARGOCD_URL }} \
+            --username ${{ env.ARGOCD_USER }} \
+            --password ${{ secrets.ARGOCD_PASSWORD }} \
+            --insecure \
+            --grpc-web
+          argocd app sync ${{ env.APP_NAME }} --grpc-web
+          argocd app wait ${{ env.APP_NAME }} \
+            --health \
+            --timeout 300 \
+            --grpc-web