diff --git a/app.py b/app.py
index 36afdb7..018a069 100644
--- a/app.py
+++ b/app.py
@@ -1912,7 +1912,7 @@ async def tts_bridge_deploy(req: TTSBridgeDeployRequest, _=Depends(_verify)):
         "pathlib.Path('/app-config/tts-bridge').mkdir(parents=True,exist_ok=True);"
         "[(pathlib.Path(p).write_text(v),os.chmod(p,0o600)) for p,v in files.items()]"
     )
-    rc, _out, err = _ssh("sascha@10.5.85.5", f"python3 -c {__import__('shlex').quote(script)}", timeout=30)
+    rc, _out, err = _ssh("sascha@10.5.85.5", f"sudo python3 -c {__import__('shlex').quote(script)}", timeout=30)
     if rc != 0:
         _audit("/tts/bridge/deploy", "POST", 500, "secret installation failed")
         raise HTTPException(status_code=500, detail="Could not install bridge secrets")