diff --git a/.drone.yml b/.drone.yml
new file mode 100644
index 0000000..fa253b7
--- /dev/null
+++ b/.drone.yml
@@ -0,0 +1,39 @@
+kind:  pipeline
+name: cloudflare-dns-drone
+type: docker
+
+platform:
+  os:  linux
+  arch: arm64
+
+steps:
+- name: copy-cert-into-place
+  image: busybox
+  volumes:
+  - name: docker-cert-persistence
+    path: /etc/docker/certs.d/
+  commands:
+  # https://stackoverflow.com/questions/72823418/how-to-make-drone-docker-plugin-use-self-signed-certs
+  - mkdir -p /etc/docker/certs.d/docker-registry.scubbo.org:8843
+  - cp /registry_cert.crt /etc/docker/certs.d/docker-registry.scubbo.org:8843/ca.crt
+- name: check-cert-persists-between-stages
+  image: alpine
+  volumes:
+  - name: docker-cert-persistence
+    path: /etc/docker/certs.d/
+  commands:
+  - apk add curl
+  - curl https://docker-registry.scubbo.org:8843/v2/_catalog --cacert /etc/docker/certs.d/docker-registry.scubbo.org:8843/ca.crt
+- name: push-image
+  image: plugins/docker
+  volumes:
+  - name: docker-cert-persistence
+    path: /etc/docker/certs.d/
+  settings:
+    repo: docker-registry.scubbo.org:8843/scubbo/cloudflare-tunnel-dns
+    tags: built_in_ci
+    debug: true
+    launch_debug: true
+volumes:
+- name: docker-cert-persistence
+  temp: {}