diff --git a/app.py b/app.py
index a9523f1..b012cd4 100644
--- a/app.py
+++ b/app.py
@@ -983,7 +983,7 @@ def _get_hetzner_dns_token() -> str:
         return token
     rc, _out, err = _ssh(
         "sascha@10.4.1.116",
-        "sudo /data/stacks/homelab-butler/vault-sync.sh",
+        "sudo bash /data/stacks/homelab-butler/vault-sync.sh",
         timeout=120,
     )
     if rc != 0: