diff --git a/playbooks/local_dns.yml b/playbooks/local_dns.yml
index aa2dab8..75dc566 100755
--- a/playbooks/local_dns.yml
+++ b/playbooks/local_dns.yml
@@ -94,6 +94,8 @@
           value: vm-general-1.ashburn.mgmt.desu.ltd
         - record: git.desu.ltd
           value: vm-general-1.ashburn.mgmt.desu.ltd
+        - record: gitlab.desu.ltd
+          value: vm-general-1.ashburn.mgmt.desu.ltd
         - record: matrix.desu.ltd
           value: vm-general-1.ashburn.mgmt.desu.ltd
         - record: movie.desu.ltd
diff --git a/playbooks/prod_web.yml b/playbooks/prod_web.yml
index 3de65f9..7c9e3c0 100755
--- a/playbooks/prod_web.yml
+++ b/playbooks/prod_web.yml
@@ -24,6 +24,7 @@
         - web/desultd.yml
         - web/element-web.yml
         - web/gitea.yml
+        - web/gitlab.yml
         - web/netbox.yml
         - web/nextcloud.yml
         - web/srv.yml
@@ -235,6 +236,8 @@
                   return 200 '{"m.homeserver":{"base_url":"https://matrix.desu.ltd"}}';
           - name: git.desu.ltd
             proxy_pass: http://gitea:3000
+          - name: gitlab.desu.ltd
+            proxy_pass: http://gitlab
           - name: matrix.desu.ltd
             proxies:
               - location: "~* ^(\/_matrix|\/_synapse|\/client|\/health)"
diff --git a/playbooks/tasks/web/gitlab.yml b/playbooks/tasks/web/gitlab.yml
new file mode 100644
index 0000000..7e25fae
--- /dev/null
+++ b/playbooks/tasks/web/gitlab.yml
@@ -0,0 +1,20 @@
+# vim:ft=ansible:
+- name: docker deploy gitlab
+  docker_container:
+    name: gitlab
+    image: gitlab/gitlab-ce:latest
+    log_driver: journald
+    env:
+      GITLAB_OMNIBUS_CONFIG: |
+        external_url 'https://gitlab.desu.ltd'
+        gitlab_rails['gitlab_shell_ssh_port'] = 2222
+    ports:
+      - 127.0.0.1:2222:22
+    networks:
+      - name: web
+        aliases: [ "gitlab" ]
+    volumes:
+      - /data/gitlab/config:/etc/gitlab
+      - /data/gitlab/logs:/var/log/gitlab
+      - /data/gitlab/data:/var/opt/gitlab
+  tags: [ docker, gitlab ]