diff --git a/apps/blog/src/env.d.ts b/apps/blog/src/env.d.ts
index f964fe0..502fae5 100644
--- a/apps/blog/src/env.d.ts
+++ b/apps/blog/src/env.d.ts
@@ -1 +1,10 @@
 /// <reference types="astro/client" />
+
+interface ImportMetaEnv {
+  readonly VERCEL_DEPLOY_HOOK: string;
+  readonly ADMIN_GITHUB_ID: string;
+}
+
+interface ImportMeta {
+  readonly env: ImportMetaEnv;
+}
diff --git a/apps/blog/src/pages/admin.astro b/apps/blog/src/pages/admin.astro
index 0566fd3..1fed7e9 100644
--- a/apps/blog/src/pages/admin.astro
+++ b/apps/blog/src/pages/admin.astro
@@ -42,6 +42,8 @@ function formatDate(date: Date): string {
 <h1>guestbook admin</h1>
 <p>logged in as {session.user?.name} <a href="/api/auth/signout">sign out</a></p>
 
+<p><button id="deploy">redeploy site</button> <span id="deploy-status"></span></p>
+
 {entries.length === 0 ? (
   <p class="muted">no pending entries</p>
 ) : (
@@ -60,6 +62,22 @@ function formatDate(date: Date): string {
 )}
 
 <script>
+  document.getElementById('deploy')?.addEventListener('click', async (e) => {
+    const btn = e.target as HTMLButtonElement;
+    const status = document.getElementById('deploy-status');
+    btn.disabled = true;
+    if (status) status.textContent = 'deploying...';
+
+    const res = await fetch('/api/deploy', { method: 'POST' });
+    if (res.ok) {
+      if (status) status.textContent = 'deploy triggered!';
+    } else {
+      const data = await res.json();
+      if (status) status.textContent = data.error || 'deploy failed';
+    }
+    btn.disabled = false;
+  });
+
   document.querySelectorAll('#entries li').forEach(li => {
     const id = li.getAttribute('data-id');
 
diff --git a/apps/blog/src/pages/api/deploy.ts b/apps/blog/src/pages/api/deploy.ts
new file mode 100644
index 0000000..3ae85cb
--- /dev/null
+++ b/apps/blog/src/pages/api/deploy.ts
@@ -0,0 +1,36 @@
+import type { APIRoute } from 'astro';
+import { getSession } from 'auth-astro/server';
+import { isAdmin } from '../../lib/auth';
+
+export const prerender = false;
+
+export const POST: APIRoute = async ({ request }) => {
+  const session = await getSession(request);
+
+  if (!session?.user?.id || !isAdmin(session.user.id)) {
+    return new Response(JSON.stringify({ error: 'Unauthorized' }), {
+      status: 403,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const hookUrl = import.meta.env.VERCEL_DEPLOY_HOOK;
+  if (!hookUrl) {
+    return new Response(JSON.stringify({ error: 'Deploy hook not configured' }), {
+      status: 500,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  const res = await fetch(hookUrl, { method: 'POST' });
+  if (!res.ok) {
+    return new Response(JSON.stringify({ error: 'Failed to trigger deploy' }), {
+      status: 502,
+      headers: { 'Content-Type': 'application/json' },
+    });
+  }
+
+  return new Response(JSON.stringify({ success: true }), {
+    headers: { 'Content-Type': 'application/json' },
+  });
+};