diff --git a/.github/workflows/release-image.yml b/.github/workflows/release-image.yml
new file mode 100644
index 000000000..6f75bda99
--- /dev/null
+++ b/.github/workflows/release-image.yml
@@ -0,0 +1,32 @@
+name: "Build and publish Docker image"
+
+on:
+  push:
+    tags:
+      - payjoin-service-**
+  workflow_dispatch:
+
+jobs:
+  build:
+    name: "Build and publish Docker image"
+    strategy:
+      fail-fast: false
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Nix
+        uses: DeterminateSystems/nix-installer-action@main
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.PAYJOIN_DOCKER_RW }}
+
+      - name: Build and release image
+        run: nix run .#packages.x86_64-linux.payjoin-service-image.copyToRegistry
diff --git a/flake.nix b/flake.nix
index 76f93e02c..552dd704c 100644
--- a/flake.nix
+++ b/flake.nix
@@ -175,7 +175,8 @@
             releasePkg = pkg.overrideAttrs (final: prev: { CARGO_PROFILE = "release"; });
           in
           nix2containerPkgs.nix2container.buildImage {
-            inherit name tag;
+            inherit tag;
+            name = "docker.io/payjoin/${name}";
             copyToRoot = pkgs.buildEnv {
               name = "root";
               paths = [ releasePkg ];