diff --git a/.drone.yml b/.drone.yml
new file mode 100644
index 0000000..f693464
--- /dev/null
+++ b/.drone.yml
@@ -0,0 +1,37 @@
+---
+kind: pipeline
+
+name: default
+
+steps:
+  - name: Build autonomic.zone docker image
+    image: docker:stable
+    volumes:
+      - name: docker_sock
+        path: /var/run/docker.sock
+    commands:
+      - docker build --no-cache -t autonomic/autonomic.zone:drone .
+
+  - name: Deploy autonomic.zone with Dokku
+    image: appleboy/drone-git-push:0.2.0-linux-amd64
+    settings:
+      remote: ssh://dokku@dokku.autonomic.zone:222/autonomic.zone
+      ssh_key:
+        from_secret: drone_deploy_key
+    when:
+      branch: master
+
+  - name: Send notification to chat.internal.autonomic.zone
+    image: rmilewski/drone-rocket:latest
+    when:
+      status: [success, failure]
+    settings:
+      webhook:
+        from_secret: rocket_chat_webhook
+      channel: drone-notify
+      username: drone-notifications-bot
+      message:
+        - value: "${DRONE_COMMIT_AUTHOR} deployed autonomic.zone (see [commit](${DRONE_COMMIT_LINK})) :partying_face:"
+          when:
+            DRONE_BUILD_STATUS: success
+        - value: "[commit](${DRONE_COMMIT_LINK}) failed to deploy autonomic.zone (see [logs](https://drone.autonomic.zone/autonomic-cooperative/autonomic.zone/${DRONE_BUILD_NUMBER})) :confounded:"
diff --git a/.envrc.sample b/.envrc.sample
new file mode 100644
index 0000000..cfe67cc
--- /dev/null
+++ b/.envrc.sample
@@ -0,0 +1,2 @@
+# The path to our pass credentials store
+export PASSWORD_STORE_DIR=$(pwd)/../infrastructure/credentials/password-store