diff --git a/docs/deploy.rst b/docs/deploy.rst
index 1a541ee..2475b41 100644
--- a/docs/deploy.rst
+++ b/docs/deploy.rst
@@ -477,6 +477,14 @@ Example:
     log.level = 'info'
 
 
+.. warning::
+
+   'debug' should not be used in production.
+
+   It tends to log a lot.
+   More significantly can represent a security issue,
+   as things like passwords will be logged 'clear text'.
+
 Custom javascript
 ~~~~~~~~~~~~~~~~~