diff --git a/deploy.sh b/deploy.sh
index 73b3b9a..5e9173f 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -9,6 +9,10 @@ case "$target" in
         directory="staging"
         ;;
     "production")
+        if [ "$(git rev-parse --abbrev-ref HEAD)" != "master" ]; then
+            echo "Not on master, refusing to deploy to production."
+            exit 1
+        fi
         nix_package="schulischer-schabernack"
         directory="production"
         ;;