diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index f01c908..08fb765 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -102,23 +102,24 @@ deploy_dev:
 #         - ssh $PROD_SSH_USER@$PROD_SSH_HOST "zsh ~/deploy.sh"
 
 deploy_production:
-  stage: deploy
-  image: docker:stable
-  only:
-    - master
-  environment:
-    name: production
-    url: sika.sik.party
-  variables:
-    DOCKER_HOST: $CI_DOCKER_HOST
-    DOCKER_TLS_VERIFY: 1
-  before_script:
-    - mkdir -p ~/.docker
-    - echo "$TLSCACERT" > ~/.docker/ca.pem
-    - echo "$TLSCERT" > ~/.docker/cert.pem
-    - echo "$TLSKEY" > ~/.docker/key.pem
-    - docker login -u gitlab-ci-token -p "$CI_BUILD_TOKEN" "$CI_REGISTRY"
-  script:
-    - docker stack deploy --with-registry-auth -c stack-compose.yml "$SERVICE_NAME"
-  after_script:
-    - docker logout "$CI_REGISTRY"
\ No newline at end of file
+    stage: deploy
+    image: docker:stable
+    only:
+        - master
+    environment:
+        name: production
+        url: sika.sik.party
+    when: manual
+    variables:
+        DOCKER_HOST: $CI_DOCKER_HOST
+        DOCKER_TLS_VERIFY: 1
+    before_script:
+        - mkdir -p ~/.docker
+        - echo "$TLSCACERT" > ~/.docker/ca.pem
+        - echo "$TLSCERT" > ~/.docker/cert.pem
+        - echo "$TLSKEY" > ~/.docker/key.pem
+        - docker login -u gitlab-ci-token -p "$CI_BUILD_TOKEN" "$CI_REGISTRY"
+    script:
+        - docker stack deploy --with-registry-auth -c stack-compose.yml "$SERVICE_NAME"
+    after_script:
+        - docker logout "$CI_REGISTRY"
\ No newline at end of file