diff --git a/.woodpecker/cd.yaml b/.woodpecker/cd.yaml
new file mode 100644
index 00000000..72f9a478
--- /dev/null
+++ b/.woodpecker/cd.yaml
@@ -0,0 +1,28 @@
+when:
+  - event: manual
+  - event: push
+    branch: main
+
+steps:
+  - name: build
+    image: nixos/nix
+    commands:
+      - whoami
+      - pwd
+      - ls
+      - ls /home
+      - env
+      - |
+        mkdir -p ~/.ssh
+        echo "$CD_SSH_KEY" > ~/.ssh/id_ed25519
+        ls -l ~/.ssh/id_ed25519
+        chmod 600 ~/.ssh/id_ed25519
+      - bash -c "strace -f -o ssh-agent.log ssh-agent -s"
+      - cat ssh-agent.log
+      - |
+        eval "$(ssh-agent -s)"
+        ssh-add ~/.ssh/id_ed25519
+      - nix-shell --run 'eval "$(ssh-agent -s)" && ssh-add ~/.ssh/id_ed25519 && ssh-agent -s && SHELL=$(which bash) nixops4 apply -v default'
+    environment:
+      CD_SSH_KEY:
+        from_secret: cd_ssh_key
diff --git a/.woodpecker/check-data-model.yaml b/.woodpecker/check-data-model.yaml
new file mode 100644
index 00000000..cb800be4
--- /dev/null
+++ b/.woodpecker/check-data-model.yaml
@@ -0,0 +1,11 @@
+when:
+  - event: manual
+  - event: pull_request
+  - event: push
+    branch: main
+
+steps:
+  - name: check-data-model
+    image: nixos/nix
+    commands:
+      - nix-shell --run 'nix-unit ./deployment/data-model-test.nix'
diff --git a/.woodpecker/check-deployment-basic.yaml b/.woodpecker/check-deployment-basic.yaml
new file mode 100644
index 00000000..35928c53
--- /dev/null
+++ b/.woodpecker/check-deployment-basic.yaml
@@ -0,0 +1,11 @@
+when:
+  - event: manual
+  - event: pull_request
+  - event: push
+    branch: main
+
+steps:
+  - name: check-deployment-basic
+    image: nixos/nix
+    commands:
+      - nix build .#checks.x86_64-linux.deployment-basic -L
diff --git a/.woodpecker/check-deployment-cli.yaml b/.woodpecker/check-deployment-cli.yaml
new file mode 100644
index 00000000..8197b60b
--- /dev/null
+++ b/.woodpecker/check-deployment-cli.yaml
@@ -0,0 +1,11 @@
+when:
+  - event: manual
+  - event: pull_request
+  - event: push
+    branch: main
+
+steps:
+  - name: check-deployment-cli
+    image: nixos/nix
+    commands:
+      - nix build .#checks.x86_64-linux.deployment-cli -L
diff --git a/.woodpecker/check-deployment-panel.yaml b/.woodpecker/check-deployment-panel.yaml
new file mode 100644
index 00000000..c9045aba
--- /dev/null
+++ b/.woodpecker/check-deployment-panel.yaml
@@ -0,0 +1,11 @@
+when:
+  - event: manual
+  - event: pull_request
+  - event: push
+    branch: main
+
+steps:
+  - name: check-deployment-panel
+    image: nixos/nix
+    commands:
+      - nix build .#checks.x86_64-linux.deployment-panel -L
diff --git a/.woodpecker/check-mastodon.yaml b/.woodpecker/check-mastodon.yaml
new file mode 100644
index 00000000..ea3ab566
--- /dev/null
+++ b/.woodpecker/check-mastodon.yaml
@@ -0,0 +1,11 @@
+when:
+  - event: manual
+  - event: pull_request
+  - event: push
+    branch: main
+
+steps:
+  - name: check-mastodon
+    image: nixos/nix
+    commands:
+      - nix build .#checks.x86_64-linux.test-mastodon-service -L
diff --git a/.woodpecker/check-panel.yaml b/.woodpecker/check-panel.yaml
new file mode 100644
index 00000000..6634999a
--- /dev/null
+++ b/.woodpecker/check-panel.yaml
@@ -0,0 +1,11 @@
+when:
+  - event: manual
+  - event: pull_request
+  - event: push
+    branch: main
+
+steps:
+  - name: check-panel
+    image: nixos/nix
+    commands:
+      - nix-build -A tests.panel
diff --git a/.woodpecker/check-peertube.yaml b/.woodpecker/check-peertube.yaml
new file mode 100644
index 00000000..1bd3f2d5
--- /dev/null
+++ b/.woodpecker/check-peertube.yaml
@@ -0,0 +1,11 @@
+when:
+  - event: manual
+  - event: pull_request
+  - event: push
+    branch: main
+
+steps:
+  - name: check-peertube
+    image: nixos/nix
+    commands:
+      - nix build .#checks.x86_64-linux.test-peertube-service -L
diff --git a/.woodpecker/check-pre-commit.yaml b/.woodpecker/check-pre-commit.yaml
new file mode 100644
index 00000000..a4865d59
--- /dev/null
+++ b/.woodpecker/check-pre-commit.yaml
@@ -0,0 +1,11 @@
+when:
+  - event: manual
+  - event: pull_request
+  - event: push
+    branch: main
+
+steps:
+  - name: check-pre-commit
+    image: nixos/nix
+    commands:
+      - nix-build -A tests
diff --git a/.woodpecker/update.yaml b/.woodpecker/update.yaml
new file mode 100644
index 00000000..8f8c207d
--- /dev/null
+++ b/.woodpecker/update.yaml
@@ -0,0 +1,22 @@
+when:
+  - event: manual
+  # - event: cron
+  #   cron: updater
+
+steps:
+  - name: lockfile
+    image: nixos/nix
+    # image: nixos/nix
+    commands:
+      - nix-shell --run "npins --verbose update"
+      # - name: Create PR
+      #   uses: https://github.com/KiaraGrouwstra/gitea-create-pull-request@f9f80aa5134bc5c03c38f5aaa95053492885b397
+      #   with:
+      #     remote-instance-api-version: v1
+      #     token: "$DEPLOY_KEY"
+      #     branch: npins-update
+      #     commit-message: "npins: update sources"
+      #     title: "npins: update sources"
+    environment:
+      DEPLOY_KEY:
+        from_secret: deploy_key