diff --git a/README.md b/README.md
index 5913a63..38c3d49 100644
--- a/README.md
+++ b/README.md
@@ -41,24 +41,15 @@ apt pulls the GUI dependencies (PySide6, pyte) automatically:
 sudo apt install ./rigdoctor_*_all.deb        # CLI only: add --no-install-recommends
 ```
 
-**Or add the apt repository** for `apt install` + automatic updates. The registry is private and
-GPG-signed, so you need a Gitea token with **`read:package`**, the signing key, and the deb822
-source (`read -rsp` keeps the token out of your shell history):
+**Or add the apt repository** for `apt install` + automatic updates. The registry is public and
+GPG-signed — no token needed; just add the signing key and a deb822 source:
 
 ```bash
-read -rsp 'Gitea read:package token: ' TOKEN; echo
-
-# signing key → dearmored into the keyring (the key endpoint requires the token too)
+# signing key → dearmored into the keyring
 sudo install -d -m 0755 /etc/apt/keyrings
-curl -fsSL --user <user>:"$TOKEN" \
-  https://git.jesseyvanofferen.com/api/packages/jessey/debian/repository.key \
+curl -fsSL https://git.jesseyvanofferen.com/api/packages/jessey/debian/repository.key \
   | sudo gpg --dearmor -o /etc/apt/keyrings/gitea-jessey.gpg
 
-# download credentials, kept out of the sources file
-printf 'machine git.jesseyvanofferen.com login <user> password %s\n' "$TOKEN" \
-  | sudo tee /etc/apt/auth.conf.d/rigdoctor.conf >/dev/null
-sudo chmod 0600 /etc/apt/auth.conf.d/rigdoctor.conf
-
 # the source (modern deb822 format, GPG-verified, all-arch)
 sudo tee /etc/apt/sources.list.d/rigdoctor.sources >/dev/null <<'EOF'
 Types: deb
@@ -72,8 +63,7 @@ EOF
 sudo apt update && sudo apt install rigdoctor
 ```
 
-Then `sudo apt upgrade` keeps it current. *(Quick-and-dirty alternative if the registry isn't
-signed: skip the key and use a one-line `deb [arch=all trusted=yes] …/debian stable main` source.)*
+Then `sudo apt upgrade` keeps it current.
 
 ### Any distro — self-extracting `.run` (no root)