diff --git a/deploy/helm/inter-hub/templates/deployment.yaml b/deploy/helm/inter-hub/templates/deployment.yaml
index 5cce236..feef8ab 100644
--- a/deploy/helm/inter-hub/templates/deployment.yaml
+++ b/deploy/helm/inter-hub/templates/deployment.yaml
@@ -15,15 +15,6 @@ spec:
       labels:
         app: {{ .Release.Name }}
     spec:
-      initContainers:
-        {{- if .Values.runMigrations }}
-        - name: migrate
-          image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
-          command: ["/bin/RunProdServer", "migrate"]
-          envFrom:
-            - secretRef:
-                name: {{ .Values.envFrom.secretRef }}
-        {{- end }}
       containers:
         - name: inter-hub
           image: {{ .Values.image.repository }}:{{ .Values.image.tag }}
diff --git a/deploy/helm/inter-hub/values.yaml b/deploy/helm/inter-hub/values.yaml
index 1d25474..78e1d03 100644
--- a/deploy/helm/inter-hub/values.yaml
+++ b/deploy/helm/inter-hub/values.yaml
@@ -30,4 +30,4 @@ resources:
 envFrom:
   secretRef: inter-hub-env
 
-runMigrations: true
+runMigrations: false
diff --git a/deploy/railiance/RUNBOOK.md b/deploy/railiance/RUNBOOK.md
index 5a11e90..5a23ce5 100644
--- a/deploy/railiance/RUNBOOK.md
+++ b/deploy/railiance/RUNBOOK.md
@@ -25,15 +25,29 @@ helm upgrade --install inter-hub deploy/helm/inter-hub \
 ```bash
 ssh root@192.168.178.135
 cd /root/inter-hub
-git pull  # (requires Gitea auth — see Gitea credentials section)
-nix build .#docker --accept-flake-config --option lazy-trees false
-# Push to Gitea registry:
-skopeo copy docker-archive:result \
-  docker://92.205.130.254:32166/coulomb/inter-hub:<sha> \
-  --dest-creds "tegwick:<GITEA_TOKEN>" \
-  --dest-tls-verify=false
+# Build:
+nix build .#docker --log-format raw > /tmp/build.log 2>&1
+
+# Push — Gitea registry token realm points to gitea.coulomb.social:80 but Gitea
+# only listens on port 32166; skopeo must use a pre-fetched token:
+SHA=$(git rev-parse --short HEAD)
+SKOPEO=/nix/store/fwdagky9lfsyrgzxiq14zijcziazfdsn-skopeo-1.22.2/bin/skopeo
+TOKEN=$(curl -s \
+  "http://92.205.130.254:32166/v2/token?service=container_registry&scope=repository:coulomb/inter-hub:push,pull" \
+  -u 'tegwick:<GITEA_API_KEY>' | awk -F'"' '/token/{print $4}')
+$SKOPEO copy --insecure-policy --dest-tls-verify=false \
+  --dest-registry-token "$TOKEN" \
+  docker-archive:result \
+  docker://92.205.130.254:32166/coulomb/inter-hub:$SHA
 ```
 
+**Notes:**
+- `skopeo` is in the Nix profile but not on PATH — use the full store path above.
+- The IHP Nix Docker image has NO `/bin/RunProdServer` symlink. The binary lives at
+  `/nix/store/<hash>-inter-hub/bin/RunProdServer` (hash changes per build).
+  Use `kubectl exec deploy/inter-hub -- /nix/store/*-inter-hub/bin/RunProdServer <cmd>`
+  if a shell is not available (the Nix image has no `/bin/sh`).
+
 ## Gitea Registry Credentials
 
 The Gitea token for registry push is stored in `~/.config/tea/config.yml` on the