diff --git a/.changeset/website-release-triggered-deploy.md b/.changeset/website-release-triggered-deploy.md
new file mode 100644
index 000000000..aab47b4f4
--- /dev/null
+++ b/.changeset/website-release-triggered-deploy.md
@@ -0,0 +1,5 @@
+---
+"nostream-website": patch
+---
+
+The site now deploys when a nostream-website release is published (changesets tags the release after the release PR merges) instead of on every push to main. Relay-only merges no longer trigger website deploys.
diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml
index f4eda8172..485968305 100644
--- a/.github/workflows/deploy-website.yml
+++ b/.github/workflows/deploy-website.yml
@@ -12,12 +12,14 @@ on:
       - published
   workflow_dispatch:
 
-concurrency:
-  group: deploy-website
-  cancel-in-progress: false
-
 jobs:
   deploy:
+    # Concurrency lives on the job, not the workflow: a relay release
+    # (v* tag) fails the if below and must not enter this deploy queue,
+    # where it could replace a queued website deploy.
+    concurrency:
+      group: deploy-website
+      cancel-in-progress: false
     if: >-
       ${{ startsWith(github.event.release.tag_name, 'nostream-website@') ||
       github.event_name == 'workflow_dispatch' }}