diff --git a/README.md b/README.md
index bde7dee..04e8af4 100644
--- a/README.md
+++ b/README.md
@@ -40,6 +40,8 @@ uv run repub serve --dev-mode
 
 In `--dev-mode`, requests under `/feeds/...` are served from `out/feeds/...`.
 
+In production, do not rely on Quart to serve published feeds. Configure the reverse proxy to serve `out/feeds/...` directly at `/feeds/...`.
+
 Important: the admin UI has no built-in authentication. Keep it bound to localhost or put it behind a trusted network layer such as Tailscale.
 
 Once the UI is running:
@@ -54,6 +56,7 @@ Operational notes:
 
 - The default database path is `republisher.db`. Set `REPUBLISHER_DB_PATH` to use a different SQLite file.
 - Mirrored feeds are written under `out/feeds/<slug>/`.
+  In production, expose `out/feeds/` directly from the reverse proxy at `/feeds/`.
 - Job logs and stats artifacts are written under `out/logs/`.
 
 The legacy one-shot config-driven crawler is still available: