diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
new file mode 100644
index 0000000..0e5a2e4
--- /dev/null
+++ b/.gitea/workflows/deploy.yml
@@ -0,0 +1,45 @@
+name: deploy-digital-me
+
+# 推送到 main → 自动同步代码到 NAS 并重新构建、重启容器
+# 目标：http://192.168.110.4:8090
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch: {}
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    env:
+      TZ: Asia/Shanghai
+    steps:
+      - name: 拉取代码
+        uses: actions/checkout@v4
+
+      - name: 拉取 Git LFS 大文件
+        run: |
+          set -e
+          apt-get update -qq
+          apt-get install -y -qq git-lfs
+          git lfs install
+          git lfs pull
+
+      - name: 同步到 NAS 并重建容器
+        run: |
+          set -e
+          export TARGET_DIR=/volume1/docker/digital-me
+          tar czf - \
+            --exclude=.git \
+            --exclude='战役素材' \
+            --exclude='水墨遮罩' \
+            --exclude='客户成片' \
+            --exclude='artifacts' \
+            digital-me-web digital-me-backend compose.yaml \
+          | ssh -i /root/.ssh/nas_ci \
+                -o StrictHostKeyChecking=no \
+                -o UserKnownHostsFile=/dev/null \
+                -o LogLevel=ERROR \
+                18702851751@192.168.110.4 \
+              "mkdir -p $TARGET_DIR && tar xzf - -C $TARGET_DIR && cd $TARGET_DIR && sudo -n /usr/local/bin/docker compose up -d --build"
+          echo "部署完成"
diff --git a/.github/workflows/check-auth-flags.yml b/ci/archive/ecs-workflows/check-auth-flags.yml
similarity index 100%
rename from .github/workflows/check-auth-flags.yml
rename to ci/archive/ecs-workflows/check-auth-flags.yml
diff --git a/.github/workflows/cleanup-and-guard.yml b/ci/archive/ecs-workflows/cleanup-and-guard.yml
similarity index 100%
rename from .github/workflows/cleanup-and-guard.yml
rename to ci/archive/ecs-workflows/cleanup-and-guard.yml
diff --git a/.github/workflows/cleanup-test-data.yml b/ci/archive/ecs-workflows/cleanup-test-data.yml
similarity index 100%
rename from .github/workflows/cleanup-test-data.yml
rename to ci/archive/ecs-workflows/cleanup-test-data.yml
diff --git a/.github/workflows/deploy-adult-backend.yml b/ci/archive/ecs-workflows/deploy-adult-backend.yml
similarity index 100%
rename from .github/workflows/deploy-adult-backend.yml
rename to ci/archive/ecs-workflows/deploy-adult-backend.yml
diff --git a/.github/workflows/deploy-adult-web.yml b/ci/archive/ecs-workflows/deploy-adult-web.yml
similarity index 100%
rename from .github/workflows/deploy-adult-web.yml
rename to ci/archive/ecs-workflows/deploy-adult-web.yml
diff --git a/.github/workflows/diagnose-cleanup.yml b/ci/archive/ecs-workflows/diagnose-cleanup.yml
similarity index 100%
rename from .github/workflows/diagnose-cleanup.yml
rename to ci/archive/ecs-workflows/diagnose-cleanup.yml
diff --git a/.github/workflows/diagnose-disk.yml b/ci/archive/ecs-workflows/diagnose-disk.yml
similarity index 100%
rename from .github/workflows/diagnose-disk.yml
rename to ci/archive/ecs-workflows/diagnose-disk.yml
diff --git a/.github/workflows/diagnose-ecs.yml b/ci/archive/ecs-workflows/diagnose-ecs.yml
similarity index 100%
rename from .github/workflows/diagnose-ecs.yml
rename to ci/archive/ecs-workflows/diagnose-ecs.yml
diff --git a/.github/workflows/fix-tangjie-rename.yml b/ci/archive/ecs-workflows/fix-tangjie-rename.yml
similarity index 100%
rename from .github/workflows/fix-tangjie-rename.yml
rename to ci/archive/ecs-workflows/fix-tangjie-rename.yml
diff --git a/.github/workflows/grant-superadmin.yml b/ci/archive/ecs-workflows/grant-superadmin.yml
similarity index 100%
rename from .github/workflows/grant-superadmin.yml
rename to ci/archive/ecs-workflows/grant-superadmin.yml
diff --git a/.github/workflows/nginx-uploads-direct.yml b/ci/archive/ecs-workflows/nginx-uploads-direct.yml
similarity index 100%
rename from .github/workflows/nginx-uploads-direct.yml
rename to ci/archive/ecs-workflows/nginx-uploads-direct.yml
diff --git a/.github/workflows/purge-twins.yml b/ci/archive/ecs-workflows/purge-twins.yml
similarity index 100%
rename from .github/workflows/purge-twins.yml
rename to ci/archive/ecs-workflows/purge-twins.yml
diff --git a/.github/workflows/recover-db.yml b/ci/archive/ecs-workflows/recover-db.yml
similarity index 100%
rename from .github/workflows/recover-db.yml
rename to ci/archive/ecs-workflows/recover-db.yml
diff --git a/.github/workflows/repair-disk.yml b/ci/archive/ecs-workflows/repair-disk.yml
similarity index 100%
rename from .github/workflows/repair-disk.yml
rename to ci/archive/ecs-workflows/repair-disk.yml
diff --git a/.github/workflows/seed-masters.yml b/ci/archive/ecs-workflows/seed-masters.yml
similarity index 100%
rename from .github/workflows/seed-masters.yml
rename to ci/archive/ecs-workflows/seed-masters.yml
diff --git a/.github/workflows/set-admin-pass.yml b/ci/archive/ecs-workflows/set-admin-pass.yml
similarity index 100%
rename from .github/workflows/set-admin-pass.yml
rename to ci/archive/ecs-workflows/set-admin-pass.yml