diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 34e44228cee3d7fcef4f184ed4867baf83a0c45a..b4fefbce4d502ca22b34a0cbf38a508d6859b361 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -3,6 +3,7 @@ image: docker:stable
 variables:
   DOCKER_HOST: "tcp://docker:2375/"
   DOCKER_DRIVER: "overlay2"
+  DOCKER_TLS_CERTDIR: ""
   DOCKER_BUILDKIT: "1"
 
 services:
@@ -11,7 +12,6 @@ services:
 before_script:
 - docker info
 - docker login -u gitlab-ci-token -p "$CI_JOB_TOKEN" "$CI_REGISTRY"
-- apk update && apk add bash
 
 
 .build: &build
@@ -35,21 +35,12 @@ build-nginx:
 
 .push-tags: &push-tags
   stage: deploy
-  when: manual
-  script:
-  - version=`eval "docker run --rm
-    ${CI_REGISTRY_IMAGE}/${CI_JOB_NAME#push-}/build:${CI_PIPELINE_ID}
-    ${GET_VERSION}"`
-  - docker pull
-    ${CI_REGISTRY_IMAGE}/${CI_JOB_NAME#push-}/build:${CI_PIPELINE_ID}
-  - docker tag
-    ${CI_REGISTRY_IMAGE}/${CI_JOB_NAME#push-}/build:${CI_PIPELINE_ID}
-    ${CI_REGISTRY_IMAGE}/${CI_JOB_NAME#push-}:${version}
-  - docker tag
-    ${CI_REGISTRY_IMAGE}/${CI_JOB_NAME#push-}/build:${CI_PIPELINE_ID}
-    ${CI_REGISTRY_IMAGE}/${CI_JOB_NAME#push-}:latest
-  - docker push ${CI_REGISTRY_IMAGE}/${CI_JOB_NAME#push-}:${version}
-  - docker push ${CI_REGISTRY_IMAGE}/${CI_JOB_NAME#push-}:latest
+  only: [master, develop]
+  script: |
+    BUILD_REPO=${CI_REGISTRY_IMAGE}/${CI_JOB_NAME#push-}/build:${CI_PIPELINE_ID}
+    DEPLOY_REPO=${CI_REGISTRY_IMAGE}/${CI_JOB_NAME#push-}
+    VERSION=`eval "docker run --rm ${BUILD_REPO} ${GET_VERSION}"`
+    . scripts/deploy.sh
 
 push-fastcgi:
   <<: *push-tags
diff --git a/Dockerfile b/Dockerfile
index 73a1085b516489201b08f4a6aa745ae3da4ccd99..40d743260b12c76c191b5504dbdd297032f47c08 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,7 +18,6 @@ LABEL uk.org.kodo.maintainer "Dom Sekotill <dom.sekotill@kodo.org.uk>"
 
 ARG wp_version=latest
 WORKDIR /app
-VOLUME /app/wp-content
 ENV WORDPRESS_ROOT=/app
 
 ADD https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar \
diff --git a/scripts/deploy.sh b/scripts/deploy.sh
new file mode 100755
index 0000000000000000000000000000000000000000..8555c151b8d2a7b378e9f096d8d21a30445ac557
--- /dev/null
+++ b/scripts/deploy.sh
@@ -0,0 +1,20 @@
+#!/bin/sh
+set -eu
+
+: ${BUILD_REPO?}
+: ${DEPLOY_REPO?}
+
+case ${CI_COMMIT_REF_NAME-develop} in
+	master) tags="latest ${VERSION-}" ;;
+	develop) tags="unstable" ;;
+	*) exit 3 ;;
+esac
+
+set -x
+
+docker pull ${BUILD_REPO}
+
+for tag in $tags; do
+	docker tag ${BUILD_REPO} ${DEPLOY_REPO}:${tag}
+	docker push ${DEPLOY_REPO}:${tag}
+done