diff --git a/blog-pim.nix b/blog-pim.nix
index b5ed4ab..8e1e2c3 100644
--- a/blog-pim.nix
+++ b/blog-pim.nix
@@ -25,7 +25,7 @@ in
 {
   packages.blog-pim = pkgs.dockerTools.buildLayeredImage {
     name = "blog-pim";
-    tag = "test"; # TODO: what is the best way to tag this?
+    tag = "latest";
 
     contents = [
       pkgs.fakeNss
diff --git a/release.sh b/release.sh
new file mode 100755
index 0000000..5cb9fa2
--- /dev/null
+++ b/release.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+IFS=$'\n\t'
+
+BLOGPIMPATH=$(nix build .#packages.x86_64-linux.blog-pim --print-out-paths --no-link)
+GITREV=$(git rev-parse HEAD)
+
+docker load < $BLOGPIMPATH
+docker tag blog-pim:latest git.kun.is/home/blog-pim:$GITREV
+docker push git.kun.is/home/blog-pim:$GITREV