diff --git a/README.md b/README.md
index e9f8a7b..4cc32ee 100644
--- a/README.md
+++ b/README.md
@@ -39,7 +39,7 @@ over WebSocket, so managed hosts need no inbound ports, no VPN and no public IP.
 One command. It asks what the host should be, then does the rest:
 
 ```sh
-curl -fsSL https://vcs.astra-dev.online/svesnav/runix/src/branch/main/install.sh -o install.sh
+curl -fsSL https://vcs.astra-dev.online/svesnav/runix/releases/download/latest/install.sh -o install.sh
 chmod +x install.sh
 ./install.sh
 ```
@@ -77,17 +77,17 @@ Every question is also a flag, so the same script works from Ansible or CI:
 
 ```sh
 # Single-host install, no questions asked
-curl -fsSL https://vcs.astra-dev.online/svesnav/runix/src/branch/main/install.sh -o install.sh
+curl -fsSL https://vcs.astra-dev.online/svesnav/runix/releases/download/latest/install.sh -o install.sh
 chmod +x install.sh
 ./install.sh --role all-in-one --yes
 
 # Agent joining an existing control plane
-curl -fsSL https://vcs.astra-dev.online/svesnav/runix/src/branch/main/install.sh -o install.sh
+curl -fsSL https://vcs.astra-dev.online/svesnav/runix/releases/download/latest/install.sh -o install.sh
 chmod +x install.sh
 ./install.sh  --role agent --url https://runix.example.com --token rnx_agt_...
 
 # Behind a reverse proxy: listen on loopback only
-curl -fsSL https://vcs.astra-dev.online/svesnav/runix/src/branch/main/install.sh -o install.sh
+curl -fsSL https://vcs.astra-dev.online/svesnav/runix/releases/download/latest/install.sh -o install.sh
 chmod +x install.sh
 ./install.sh  --role server --bind 127.0.0.1 --public-url https://runix.example.com -y
 ```
@@ -126,7 +126,7 @@ restarted, while your configuration — above all the JWT and encryption secrets
 — is preserved:
 
 ```sh
-curl -fsSL https://vcs.astra-dev.online/svesnav/runix/src/branch/main/install.sh -o install.sh
+curl -fsSL https://vcs.astra-dev.online/svesnav/runix/releases/download/latest/install.sh -o install.sh
 chmod +x install.sh
 ./install.sh -y
 ```