diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index ccf6676..3dbb179 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -4,6 +4,76 @@ stages:
   - publish
   - deploy
 
+variables:
+  # Can't compose variables with user-defined ones, so we repeat ourselves :'(
+  # See https://gitlab.com/gitlab-org/gitlab-runner/-/issues/1809
+  IMAGE_REGISTRY: rg.fr-par.scw.cloud/crocmagnon
+  IMAGE_TESTS: $CI_REGISTRY_IMAGE:tests-latest
+  IMAGE_DEPS_TESTS: $CI_REGISTRY_IMAGE:tests-deps
+  IMAGE_LATEST: rg.fr-par.scw.cloud/crocmagnon/blog:latest
+  IMAGE_DEPS_LATEST: $CI_REGISTRY_IMAGE:deps
+
+  PRE_COMMIT_IMAGE: rg.fr-par.scw.cloud/crocmagnon/pre-commit:latest
+
+.build: &build
+  image: docker:20.10.1
+  services:
+    - docker:20.10.1-dind
+  script:
+    - docker login -u $CI_REGISTRY_USER -p $CI_REGISTRY_PASSWORD $CI_REGISTRY
+    - docker login -u $REGISTRY_USER -p $REGISTRY_PASSWORD $IMAGE_REGISTRY
+    - docker pull $IMAGE || true
+    - docker pull $DEPS || true
+    # Build this first stage separately so that we can cache it
+    - docker build --pull --build-arg POETRY_OPTIONS --target venv --cache-from $DEPS -t $DEPS .
+    # Build the final image. The "cache from" deps is necessary to take advantage of the intermediate image cache.
+    # See https://stackoverflow.com/a/52649913/2758732 and https://github.com/moby/moby/issues/34715
+    - docker build --pull --build-arg POETRY_OPTIONS --cache-from $IMAGE --cache-from $DEPS -t $IMAGE .
+    - docker push $IMAGE
+    - docker push $DEPS
+
+build-tests:
+  <<: *build
+  stage: build
+  variables:
+    POETRY_OPTIONS: ""
+  before_script:
+    - export IMAGE=$IMAGE_TESTS
+    - export DEPS=$IMAGE_DEPS_TESTS
+
+.tests: &tests
+  stage: test
+  image: $IMAGE_TESTS
+
+unit_tests:
+  <<: *tests
+  script:
+    - cd /app
+    - python -m pytest
+
+pre_commit:
+  stage: test
+  image: $PRE_COMMIT_IMAGE
+  script:
+    - pre-commit run --all-files --color always --show-diff-on-failure
+  needs: []
+
+missing_migrations:
+  <<: *tests
+  script:
+    - cd /app
+    - python manage.py makemigrations --check
+
+publish:
+  <<: *build
+  stage: publish
+  variables:
+    POETRY_OPTIONS: "--no-dev"
+  before_script:
+    - export IMAGE=$IMAGE_LATEST
+    - export DEPS=$IMAGE_DEPS_LATEST
+  only:
+    - master
 
 deploy:
   stage: deploy