diff --git a/data/common/common.yaml b/data/common/common.yaml
--- a/data/common/common.yaml
+++ b/data/common/common.yaml
@@ -818,6 +818,10 @@
     domains:
       - deposit.staging.swh.network
       - deposit-rp.internal.staging.swh.network
+  graphql_staging:
+    domains:
+      - graphql.staging.swh.network
+      - graphql-rp.internal.staging.swh.network
   hedgedoc:
     domains:
       - hedgedoc.softwareheritage.org
diff --git a/data/deployments/staging/common.yaml b/data/deployments/staging/common.yaml
--- a/data/deployments/staging/common.yaml
+++ b/data/deployments/staging/common.yaml
@@ -140,6 +140,15 @@
 swh::deploy::webapp::vhost::letsencrypt_cert: archive_staging
 swh::deploy::webapp::reverse_proxy::backend_http_host: webapp.internal.staging.swh.network
 
+swh::deploy::graphql::vhost::letsencrypt_cert: graphql_staging
+swh::deploy::graphql::reverse_proxy::basic_auth: true
+swh::deploy::graphql::reverse_proxy::backend_http_host: graphql-worker0.internal.staging.swh.network
+swh::deploy::graphql::reverse_proxy::backend_http_port: "80"
+
+# swh::deploy::graphql::reverse_proxy::basic_auth::swh-stg in private data
+swh::deploy::graphql::reverse_proxy::basic_auth::users:
+  - swh-stg
+
 swh::remote_service::objstorage::config::rw:
   cls: remote
   url: "http://storage1.internal.staging.swh.network:%{hiera('swh::remote_service::objstorage::port')}/"
@@ -176,6 +185,7 @@
   - deposit
   - webapp
   - objstorage
+  - graphql
 
 swh::postgresql::version: '12'
 swh::postgresql::port: 5433
diff --git a/data/subnets/vagrant.yaml b/data/subnets/vagrant.yaml
--- a/data/subnets/vagrant.yaml
+++ b/data/subnets/vagrant.yaml
@@ -269,6 +269,12 @@
     host: rancher-node-intern1.internal.staging.swh.network
   10.168.130.142:
     host: rancher-node-intern2.internal.staging.swh.network
+  10.168.130.150:
+    host: graphql-worker0.internal.staging.swh.network
+  10.168.130.151:
+    host: graphql-worker1.internal.staging.swh.network
+  10.168.130.152:
+    host: graphql-worker2.internal.staging.swh.network
   10.168.130.160:
     host: mirror-test.internal.staging.swh.network
   10.168.200.22: