diff --git a/deploy.sh b/deploy.sh
index b027255..1d35ec9 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -22,6 +22,12 @@ DOMAIN="${DOMAIN:-nextwks.eu}"
 # --- Mode detection ---
 GREENFIELD=false
 if [ "${1:-}" = "--destroy" ]; then
+    echo ""
+    echo "⚠️  WARNING: Greenfield deploy destroys LE certificates and hits Let's Encrypt rate limits!"
+    echo "   Only use --destroy if you understand the consequences."
+    echo "   Press Ctrl+C now to abort, or wait 5 seconds to continue..."
+    echo ""
+    sleep 5
     GREENFIELD=true
     echo "[MODE] Greenfield deploy (--destroy)"
 elif [ ! -d "$TARGET_DIR" ]; then