diff --git a/deploy/push.sh b/deploy/push.sh
index 7c72eab..ba5f7e8 100755
--- a/deploy/push.sh
+++ b/deploy/push.sh
@@ -8,11 +8,15 @@
 #
 #   ./deploy/push.sh [user@host] [port]
 #
+# The password is never stored here — ssh asks for it on your terminal. To
+# stop being asked at all, run `ssh-copy-id -p 2222 ericwyuan@192.168.50.64`
+# once; after that this script runs unattended.
+#
 # Never touches .env, .venv or the database on the far side.
 set -e
 
 HOST="${1:-ericwyuan@192.168.50.64}"
-PORT="${2:-22}"
+PORT="${2:-2222}"
 REPO="$(cd "$(dirname "$0")/.." && pwd)"
 CTL="$(mktemp -u /tmp/garmin-deploy-XXXXXX)"