diff --git a/stack.staging.yml b/stack.staging.yml
new file mode 100644
index 0000000..79063ef
--- /dev/null
+++ b/stack.staging.yml
@@ -0,0 +1,38 @@
+version: "3.7"
+networks:
+  traefik:
+    external: true
+services:
+  resume:
+    image: git.nixc.us/colin/resume:staging
+    deploy:
+      placement:
+        constraints:
+          - node.hostname == ingress.nixc.us
+      update_config:
+        order: start-first
+        failure_action: rollback
+        delay: 5s
+        delay: 10s
+        parallelism: 1
+      restart_policy:
+        condition: on-failure
+      labels:
+        us.nixc.autodeploy: "true"
+        traefik.enable: "true"
+        traefik.http.routers.staging_resume.tls: "true"
+        traefik.http.services.staging_resume.loadbalancer.server.port: "8080"
+        traefik.http.routers.staging_resume.rule: "Host(`staging.resume.colinknapp.com`, `staging.colinknapp.com`)"
+        traefik.http.routers.staging_resume.entrypoints: "websecure"
+        traefik.http.routers.staging_resume.tls.certresolver: "letsencryptresolver"
+        traefik.http.routers.staging_resume.service: "staging_resume"
+        traefik.docker.network: "traefik"
+#        traefik.http.routers.staging_resume.middlewares: "authelia@docker"
+    networks:
+      traefik:
+    # logging:
+    #   driver: "gelf"
+    #   options:
+    #     gelf-address: "udp://log.nixc.us:15124"
+    #     tag: "resume_resume"
+