diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index e0a2e3c..7fa7817 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -24,3 +24,5 @@
 {"d":"2026-04-09","t":"FIX","m":"aspath/rpki-history/looking-glass/communities: fetchJSONWithRetry with 15-20s timeouts replaced by fetchJSON 5-6s — was causing 40-72s hangs"}
 {"d":"2026-04-09","t":"FIX","m":"loadCommunities/loadIrrAudit/loadRpkiHistory/loadAspath/loadHijackMonitor: add AbortController 8-10s — cards no longer spin forever"}
 {"d":"2026-04-09","t":"FIX","m":"renderResilienceScore + renderRouteLeak: functions were called but never defined — caused JS crash 'is not defined' breaking entire doLookup render"}
+{"d":"2026-04-09","t":"INFRA","m":"Production git synced to GitHub main (11 commits ahead fixed via git pull); deploy.sh script added for future deployments"}
+{"d":"2026-04-09","t":"INFRA","m":"PeeringDB SQLite daily cron: peeringdb sync at 03:00 UTC, refresh-peeringdb.sh installed on Erik; DB refreshed 34302→34387 networks"}
diff --git a/deploy/deploy.sh b/deploy/deploy.sh
new file mode 100755
index 0000000..9964087
--- /dev/null
+++ b/deploy/deploy.sh
@@ -0,0 +1,22 @@
+#!/bin/bash
+# PeerCortex deploy script
+# Usage: ./deploy/deploy.sh
+# Requires: gh CLI logged in, SSH access to erik
+
+set -e
+REMOTE=erik
+APP_DIR=/opt/peercortex-app
+
+echo "[deploy] Pushing to GitHub..."
+git push origin main
+
+echo "[deploy] Pulling on ${REMOTE}..."
+GH_TOKEN=$(gh auth token)
+ssh ${REMOTE} "cd ${APP_DIR} && \
+  git remote set-url origin https://renefichtmueller:${GH_TOKEN}@github.com/renefichtmueller/PeerCortex.git && \
+  git pull origin main && \
+  git remote set-url origin https://github.com/renefichtmueller/PeerCortex.git && \
+  npm install --omit=dev --silent && \
+  pm2 restart peercortex"
+
+echo "[deploy] Done."