diff --git a/.gitea/workflows/apply-master.yaml b/.gitea/workflows/apply-master.yaml
new file mode 100644
index 0000000..0d6d004
--- /dev/null
+++ b/.gitea/workflows/apply-master.yaml
@@ -0,0 +1,39 @@
+name: Terraform validate and apply
+run-name: ${{ gitea.actor }} applying terraform
+on: 
+  push:
+    branches:
+      - master
+env:
+  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+  CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+
+  TF_VAR_aws_region: ${{ vars.TF_VAR_aws_region }}
+  TF_VAR_site_domain: ${{ vars.TF_VAR_site_domain }}
+jobs:
+  nix:
+    strategy:
+      fail-fast: true
+      matrix:
+        os: [ubuntu-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v4
+      - run: ls
+      - name: Set up terraform
+        uses: hashicorp/setup-terraform@v3
+      - name: Init
+        id: init
+        run: terraform init
+      - name: Check formatting
+        id: fmt
+        run: terraform fmt -check
+      - name: Validate
+        id: validate
+        run: terraform validate
+      - name: Plan
+        id: plan
+        run: terraform plan -no-color -input=false
+