diff --git a/.drone.yml b/.drone.yml
index 90c8a4a..c1f84b7 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -1,8 +1,8 @@
 kind: pipeline
-name: build image
+name: homepage
 
 steps:
-- name: publish
+- name: build and publish
   image: plugins/docker
   settings:
     registry: codeberg.org
@@ -10,9 +10,15 @@ steps:
       from_secret: registry_username
     password:
       from_secret: registry_password
-    repo: codeberg.org/angestoepselt/homepage
+    repo: codeberg.org/angestoepselt/homepage:${DRONE_BRANCH}
     build_args:
     - SITE=angestoepselt
-    tags: latest
+    tags: 
     when:
       branch: [captcha]
+
+- name: deploy
+  image: plugins/webhook
+  settings:
+    urls:
+      from_secret: portainer_url
\ No newline at end of file
diff --git a/docker-compose.stage.yml b/docker-compose.stage.yml
new file mode 100644
index 0000000..47919a7
--- /dev/null
+++ b/docker-compose.stage.yml
@@ -0,0 +1,24 @@
+---
+version: '3'
+
+services:
+  homepage-stage:
+    image: codeberg.org/angestoepselt/homepage:captcha
+    container_name: homepage-stage
+    restart: unless-stopped
+    env_file: stack.env
+    security_opt:
+      - no-new-privileges:true
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.homepage-stage-secure.rule=Host(`stage.${DOMAIN}`)"
+      - "traefik.http.routers.homepage-stage-secure.entrypoints=websecure"
+      - "traefik.http.routers.homepage-stage-secure.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.homepage-stage-secure.tls=true"
+    networks:
+      - proxy
+
+networks:
+  proxy:
+    external: true
\ No newline at end of file