diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 6e89a589d018ddfa65eed92bd8defb8ebb8f4c6b..bbd62a07dd6b6143ded1848d758231dc899c1d3b 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -68,7 +68,6 @@ light-deploy-testing:
   # only run when master is updated, unless the pipeline was triggered via the web UI
   only:
     - master
-    - only-docker-restart
   except:
     - tags
     - web
@@ -85,6 +84,27 @@ light-deploy-testing:
     - ssh -oStrictHostKeyChecking=accept-new apiserver@$TESTING_DOMAIN "cd /home/apiserver/datacatalog && sudo git pull --all && sudo git checkout -f $CI_COMMIT_BRANCH"
     - ssh -oStrictHostKeyChecking=accept-new apiserver@$TESTING_DOMAIN "sudo /home/apiserver/datacatalog/deploy_scripts/deployment.sh /home/apiserver/datacatalog $TESTING_URL $TESTING_DOMAIN"
 
+light-deploy-production:
+  stage: deploy 
+  # only run when master is updated, unless the pipeline was triggered via the web UI
+  only:
+    - tags
+  except:
+    - web
+  tags: [stable]
+  environment: Production
+  variables:
+    OS_AUTH_TYPE: v3applicationcredential
+    OS_AUTH_URL: https://hdf-cloud.fz-juelich.de:5000
+    OS_IDENTITY_API_VERSION: 3
+    OS_REGION_NAME: "HDFCloud"
+    OS_INTERFACE: public
+    PRODUCTION_URL: https://datacatalog.fz-juelich.de/
+    PRODUCTION_DOMAIN: datacatalog.fz-juelich.de
+  script:
+    - ssh -oStrictHostKeyChecking=accept-new apiserver@$PRODUCTION_DOMAIN "cd /home/apiserver/datacatalog && sudo git pull --all && sudo git checkout -f $CI_COMMIT_TAG"
+    - ssh -oStrictHostKeyChecking=accept-new apiserver@$PRODUCTION_DOMAIN "sudo /home/apiserver/datacatalog/deploy_scripts/deployment.sh /home/apiserver/datacatalog $PRODUCTION_URL $PRODUCTION_DOMAIN"
+
 full-deploy-production:
   stage: deploy
   # only run when stable tag is assigned and the pipeline is triggered in the web UI