diff --git a/Home.md b/Home.md
index 2953625..7e778fb 100644
--- a/Home.md
+++ b/Home.md
@@ -13,7 +13,7 @@ real spending on the applied side.
 * [DevelopmentGuide](DevelopmentGuide) — prerequisites, setup, run, test,
   project layout, conventions, throwaway-DB pattern
 * [Operations](Operations) — backup script, restore, DB safety rule,
-  alembic hook, /healthz endpoint, structured JSON logs
+  alembic hook, /healthz endpoint, structured JSON logs, deploy flow
 * [Roadmap](Roadmap) — shipped features and what's deferred
 
 ## At a glance
@@ -72,6 +72,10 @@ where leftover applied dollars belong; filling it is the user's job.
 
 ## Status
 
+Live in production on home-ctr-onyx at
+`https://quartermaster.unbiasedgeek.com/` since 2026-04-19. Every merge
+to `main` rolls out automatically via `.forgejo/workflows/deploy.yml`.
+
 Shipped: initial scaffold, monthly snapshot with deviation tags, database
 backup script with alembic auto-hook, zero-amount header, section groups
 with collapsible headers, sinking funds section, per-entry notes, month
@@ -79,7 +83,10 @@ lifecycle with the balance gate, UI redesign in Barlow Condensed + logo,
 backing transaction ledger with `applied` derived from postings,
 budget-side inline edit of entry name and amount, `/healthz` endpoint,
 structured JSON logs on stdout with five seed application events for
-Loki. See the [Roadmap](Roadmap) for what is next.
+Loki, production deploy pipeline (Dockerfile, compose.yml, Forgejo
+Actions workflow).
+
+See the [Roadmap](Roadmap) for what's deferred.
 
 ## Deploy
 
@@ -88,9 +95,11 @@ homelab platform is documented on the platform wiki as
 [PlatformContractQuartermaster](https://forgejo.labbity.unbiasedgeek.com/homelab/homelab-IaC/wiki/PlatformContractQuartermaster).
 Platform-side provisioning (DNS for `quartermaster.unbiasedgeek.com`,
 Traefik basic-auth + rate-limit middlewares, `/mnt/quartermaster/` bind
-mount with nightly restic) is complete. Container side (Dockerfile,
-`compose.yml`, Forgejo Actions workflow) is tracked under open issues
-and will land in a follow-up session.
+mount with nightly restic) is complete. Container side (`Dockerfile`,
+`compose.yml`, `.forgejo/workflows/deploy.yml`) lives in the repo; push
+to `main` triggers the deploy workflow which builds + pushes the image
+and rolls the container via `docker compose` against the host's Docker
+daemon. See [Operations](Operations) for the flow and required secrets.
 
 ## Code