diff --git a/.gitea/workflows/ci-cd.yaml b/.gitea/workflows/ci-cd.yaml
new file mode 100644
index 0000000..eac3e43
--- /dev/null
+++ b/.gitea/workflows/ci-cd.yaml
@@ -0,0 +1,233 @@
+name: CI-CD-AKS-Agent
+
+on:
+  push:
+    branches: ["main"]
+  workflow_dispatch:
+
+jobs:
+  build_and_deploy:
+    runs-on: self-hosted
+    
+    env:
+      ACR_LOGIN_SERVER: ${{ secrets.ACR_LOGIN_SERVER }}
+      ACR_USERNAME: ${{ secrets.ACR_USERNAME }}
+      ACR_PASSWORD: ${{ secrets.ACR_PASSWORD }}
+      AZ_CLIENT_ID: ${{ secrets.AZ_CLIENT_ID }}
+      AZ_CLIENT_SECRET: ${{ secrets.AZ_CLIENT_SECRET }}
+      AZ_TENANT_ID: ${{ secrets.AZ_TENANT_ID }}
+      AZ_SUBSCRIPTION_ID: ${{ secrets.AZ_SUBSCRIPTION_ID }}
+      AZ_RG: ${{ secrets.AZ_RG }}
+      AZ_AKS: ${{ secrets.AZ_AKS }}
+      AZURE_DNS_ZONE: ${{ secrets.AZURE_DNS_ZONE }}
+      AZURE_DNS_RG: ${{ secrets.AZURE_DNS_RG }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install Azure CLI
+        run: |
+          if ! command -v az &> /dev/null; then
+            curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
+          fi
+
+      - name: Install kubectl
+        run: |
+          if ! command -v kubectl &> /dev/null; then
+            ARCH=$(uname -m)
+            case $ARCH in
+              x86_64) ARCH="amd64" ;;
+              aarch64|arm64) ARCH="arm64" ;;
+            esac
+            curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/${ARCH}/kubectl"
+            sudo install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl
+            rm kubectl
+          fi
+
+      - name: Build Docker image (ARM64)
+        run: |
+          docker build -t $ACR_LOGIN_SERVER/ai-agents/123jinaitool-887a89:${{ github.sha }} .
+          docker tag $ACR_LOGIN_SERVER/ai-agents/123jinaitool-887a89:${{ github.sha }} $ACR_LOGIN_SERVER/ai-agents/123jinaitool-887a89:latest
+
+      - name: Debug Secrets
+        run: |
+          echo "ACR_LOGIN_SERVER=$ACR_LOGIN_SERVER"
+          echo "ACR_USERNAME=$ACR_USERNAME"
+          echo "ACR_PASSWORD length=$(echo -n "$ACR_PASSWORD" | wc -c)"
+          if [ -z "$ACR_PASSWORD" ]; then echo "ERROR: ACR_PASSWORD is empty!"; fi
+
+      - name: Login to ACR
+        run: |
+          echo "$ACR_PASSWORD" | docker login "$ACR_LOGIN_SERVER" -u "$ACR_USERNAME" --password-stdin
+
+      - name: Push Docker image
+        run: |
+          docker push $ACR_LOGIN_SERVER/ai-agents/123jinaitool-887a89:${{ github.sha }}
+          docker push $ACR_LOGIN_SERVER/ai-agents/123jinaitool-887a89:latest
+          
+          echo "✅ 镜像已推送: $ACR_LOGIN_SERVER/ai-agents/123jinaitool-887a89:latest"
+
+      - name: Login Azure
+        run: |
+          az login --service-principal \
+            -u "$AZ_CLIENT_ID" \
+            -p "$AZ_CLIENT_SECRET" \
+            --tenant "$AZ_TENANT_ID"
+          az account set --subscription "$AZ_SUBSCRIPTION_ID"
+
+      - name: Get AKS Credentials
+        run: |
+          az aks get-credentials \
+            --resource-group "$AZ_RG" \
+            --name "$AZ_AKS" \
+            --overwrite-existing
+
+      - name: Setup ACR Pull Secret
+        run: |
+          # 创建 Agent 专用命名空间
+          kubectl create namespace agent-123jinaitool-887a89 --dry-run=client -o yaml | kubectl apply -f -
+          
+          # 创建或更新 ACR 拉取 Secret
+          kubectl create secret docker-registry acr-secret \
+            --docker-server=$ACR_LOGIN_SERVER \
+            --docker-username=$ACR_USERNAME \
+            --docker-password=$ACR_PASSWORD \
+            -n agent-123jinaitool-887a89 --dry-run=client -o yaml | kubectl apply -f -
+
+      - name: Deploy to AKS
+        run: |
+          # 删除旧的 deployment（如果存在）
+          kubectl delete deployment 123jinaitool-887a89 -n agent-123jinaitool-887a89 --ignore-not-found=true
+          
+          # 创建 deployment YAML
+          cat <<EOF | kubectl apply -f -
+          apiVersion: apps/v1
+          kind: Deployment
+          metadata:
+            name: 123jinaitool-887a89
+            namespace: agent-123jinaitool-887a89
+            labels:
+              app: 123jinaitool-887a89
+              managed-by: gitea-cicd
+          spec:
+            replicas: 1
+            selector:
+              matchLabels:
+                app: 123jinaitool-887a89
+            template:
+              metadata:
+                labels:
+                  app: 123jinaitool-887a89
+              spec:
+                imagePullSecrets:
+                - name: acr-secret
+                nodeSelector:
+                  kubernetes.io/arch: arm64
+                tolerations:
+                - key: "kubernetes.io/arch"
+                  operator: "Equal"
+                  value: "arm64"
+                  effect: "NoSchedule"
+                containers:
+                - name: 123jinaitool-887a89
+                  image: $ACR_LOGIN_SERVER/ai-agents/123jinaitool-887a89:${{ github.sha }}
+                  ports:
+                  - containerPort: 8000
+                  env:
+                  - name: OPENAI_BASE_URL
+                    value: "https://litellm.graystone-fb459c5d.southeastasia.azurecontainerapps.io/v1"
+                  - name: MODEL_NAME
+                    value: "taiji/gpt-4o-mini"
+                  - name: TOOL_API_KEY
+                    value: "jina_e26dc30420a44a1e859216528065b203TkMRmsoz-FgMDQC5FZX9jr5oF2CI"
+                  resources:
+                    requests:
+                      cpu: "100m"
+                      memory: "128Mi"
+                    limits:
+                      cpu: "500m"
+                      memory: "512Mi"
+                  livenessProbe:
+                    httpGet:
+                      path: /health
+                      port: 8000
+                    initialDelaySeconds: 30
+                    periodSeconds: 30
+                  readinessProbe:
+                    httpGet:
+                      path: /health
+                      port: 8000
+                    initialDelaySeconds: 10
+                    periodSeconds: 10
+          EOF
+          
+          # 创建 Service
+          cat <<EOF | kubectl apply -f -
+          apiVersion: v1
+          kind: Service
+          metadata:
+            name: 123jinaitool-887a89-service
+            namespace: agent-123jinaitool-887a89
+          spec:
+            type: LoadBalancer
+            ports:
+            - port: 80
+              targetPort: 8000
+            selector:
+              app: 123jinaitool-887a89
+          EOF
+
+      - name: Wait for Deployment
+        run: |
+          kubectl rollout status deployment/123jinaitool-887a89 -n agent-123jinaitool-887a89 --timeout=180s || {
+            echo "=== Deployment 状态 ==="
+            kubectl get deployment 123jinaitool-887a89 -n agent-123jinaitool-887a89 -o wide
+            echo "=== Pod 状态 ==="
+            kubectl get pods -l app=123jinaitool-887a89 -n agent-123jinaitool-887a89 -o wide
+            echo "=== Pod 事件 ==="
+            kubectl describe pods -l app=123jinaitool-887a89 -n agent-123jinaitool-887a89 | tail -30
+            exit 1
+          }
+          
+          echo "=== 部署成功 ==="
+          kubectl get svc 123jinaitool-887a89-service -n agent-123jinaitool-887a89
+          
+          # 等待 LoadBalancer IP
+          echo "等待 LoadBalancer IP..."
+          for i in {1..30}; do
+            EXTERNAL_IP=$(kubectl get svc 123jinaitool-887a89-service -n agent-123jinaitool-887a89 -o jsonpath='{.status.loadBalancer.ingress[0].ip}' 2>/dev/null)
+            if [ -n "$EXTERNAL_IP" ]; then
+              echo "✅ Agent LoadBalancer IP: $EXTERNAL_IP"
+              echo "EXTERNAL_IP=$EXTERNAL_IP" >> $GITHUB_ENV
+              break
+            fi
+            sleep 10
+          done
+
+      - name: Create DNS Record
+        if: env.EXTERNAL_IP != ''
+        run: |
+          echo "创建 DNS 记录: 123jinaitool-887a89.$AZURE_DNS_ZONE -> $EXTERNAL_IP"
+          
+          # 获取 Azure 访问令牌
+          ACCESS_TOKEN=$(az account get-access-token --query accessToken -o tsv)
+          
+          # 创建 DNS A 记录 (DNS Zone 在单独的资源组中)
+          DNS_RG="${AZURE_DNS_RG:-taiji-Ai-v0}"
+          DNS_URL="https://management.azure.com/subscriptions/$AZ_SUBSCRIPTION_ID/resourceGroups/$DNS_RG/providers/Microsoft.Network/dnsZones/$AZURE_DNS_ZONE/A/123jinaitool-887a89?api-version=2018-05-01"
+          
+          curl -X PUT "$DNS_URL" \
+            -H "Authorization: Bearer $ACCESS_TOKEN" \
+            -H "Content-Type: application/json" \
+            -d '{
+              "properties": {
+                "TTL": 300,
+                "ARecords": [{"ipv4Address": "'"$EXTERNAL_IP"'"}]
+              }
+            }'
+          
+          echo ""
+          echo "✅ DNS 记录创建成功!"
+          echo "🌐 Agent 访问地址: http://123jinaitool-887a89.$AZURE_DNS_ZONE"
+          echo "🌐 Agent IP 地址: http://$EXTERNAL_IP"
+