diff --git a/README.md b/README.md
index 127c7e9..b5ee5e9 100644
--- a/README.md
+++ b/README.md
@@ -41,6 +41,15 @@ bun run dev
 
 The service exposes `/healthz` and `/readyz` on port `8080`.
 
+## Production
+
+The VM-106 deployment uses the existing `/opt/miband-tracker` directory and the
+`compose.vm106.yaml` file. Production images are published to GHCR and activated by
+`.github/workflows/cd.yml` as immutable digests. Enable its deploy job with repository variable
+`DEPLOY_ENABLED=true` and the secrets `DEPLOY_HOST`, `DEPLOY_USER`, `DEPLOY_SSH_PRIVATE_KEY`, and
+`DEPLOY_KNOWN_HOSTS`. Keep `/opt/miband-tracker/secrets.env` and `/opt/miband-tracker/data` on the
+server; the workflow does not copy either one.
+
 ## License
 
 [GNU GPL v3.0 or later](LICENSE).