diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 3b9de06..691c0c2 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -49,7 +49,7 @@ jobs:
     container: debian:bookworm
     steps:
       - name: install curl
-        run: apt update && apt -y --no-install-recommends install curl ca-certificates
+        run: apt update && apt -y --no-install-recommends install curl ca-certificates ruby
 
       - name: clone yeti-pg-ext repo for ci/deploy.sh
         uses: actions/checkout@v4
@@ -62,3 +62,19 @@ jobs:
         run: ci/deploy.sh bookworm 1.13 main *.deb
         env:
           PKG_API_BASE: ${{secrets.PKG_API_BASE}}
+
+      - name: Setup deb-s3
+        run: gem install deb-s3
+
+      - name: Import GPG key
+        uses: crazy-max/ghaction-import-gpg@v6
+        with:
+          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.GPG_PASSPHRASE }}
+        
+      - name: Upload package
+        env:
+          AWS_ACCESS_KEY_ID: ${{secrets.DEB_AWS_ACCESS_KEY_ID}}
+          AWS_SECRET_ACCESS_KEY: ${{secrets.DEB_AWS_SECRET_ACCESS_KEY}}
+          AWS_ENDPOINT_URL: ${{secrets.DEB_AWS_ENDPOINT}}
+        run: deb-s3 upload --bucket=${{secrets.DEB_AWS_BUCKET}} --prefix=1.13 --codename=bookworm --component=main --visibility=nil --force-path-style --sign=B104E10C35895CFAC0F91473C8D3BC80B6F22179 --gpg-options "\-\-pinentry-mode=loopback \-\-no-tty \-\-batch \-\-yes \-\-passphrase ${{ secrets.GPG_PASSPHRASE }}" *.deb       
diff --git a/debian/changelog b/debian/changelog
index 765144e..4d117dc 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,6 @@
 yeti-pg-ext (1.3.11p9) stable; urgency=medium
   * lnp_resolve_cnam: fix cached value return
- -- Michael Furmur <furmur@pm.me>  Wed, 13 Nov 2024 18:54:55 +0200
+ -- Michael Furmur <furmur@pm.me>  Thu, 12 Dec 2024 01:23:26 +0200
 
 yeti-pg-ext (1.3.11p8) stable; urgency=medium
   * lnp_resolve_cnam: support local cache