diff --git a/ci/Jenkinsfile b/ci/Jenkinsfile
index 858bb95..9b3b08e 100644
--- a/ci/Jenkinsfile
+++ b/ci/Jenkinsfile
@@ -70,6 +70,17 @@ pipeline {
                         }
                     }
 
+                    stage('Publish') {
+                        when {
+                            branch 'main'
+                        }
+                        steps {
+                            sshagent(['jenkins-repohost']) {
+                                sh '. ci/publish.sh'
+                            }
+                        }
+                    }
+
                 }
             }
         }
diff --git a/ci/prepare.sh b/ci/prepare.sh
index 42755a3..fd1c556 100644
--- a/ci/prepare.sh
+++ b/ci/prepare.sh
@@ -2,7 +2,9 @@
 
 xargs dnf install -y --setopt install_weak_deps=0 <<EOF
 kernel-devel
+openssh-clients
 rpm-build
 rpm-sign
+rsync
 util-linux
 EOF
diff --git a/ci/publish.sh b/ci/publish.sh
new file mode 100644
index 0000000..e550c2a
--- /dev/null
+++ b/ci/publish.sh
@@ -0,0 +1,22 @@
+#!/bin/sh
+
+ARCH="$(uname -m)"
+REPO_HOST=jenkins@files.pyrocufflink.blue
+REPO_PATH=/srv/www/repohost/repos/dch/fedora/$(rpm --eval %fedora)
+
+case "${ARCH}" in
+x86_64)
+    # only include the SRPM once
+    include='*.rpm'
+    ;;
+*)
+    include="*.${ARCH}.rpm"
+    ;;
+esac
+
+rsync -rtiO \
+    --chmod=ugo=rwX \
+    --include "${include}" \
+    --exclude '*' \
+    ./ \
+    "${REPO_HOST}:${REPO_PATH}/"