diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index 94e5c52..639924b 100755
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -154,11 +154,11 @@ fi
 if [ '${COPY_SHARED[$TARGET]}' = '1' ]; then
   echo '[3/5] Copying shared configs into place...'
   mkdir -p /opt/searxng/config /opt/prometheus/config /opt/loki/config /opt/alloy/config
-  cp shared/searxng/settings.yml /opt/searxng/config/settings.yml
-  cp shared/searxng/limiter.toml /opt/searxng/config/limiter.toml
-  cp shared/prometheus/prometheus.yml /opt/prometheus/config/prometheus.yml
-  cp shared/loki/loki-config.yaml /opt/loki/config/loki-config.yaml
-  cp shared/alloy/config.alloy /opt/alloy/config/config.alloy
+  ${SUDO} cp shared/searxng/settings.yml /opt/searxng/config/settings.yml
+  ${SUDO} cp shared/searxng/limiter.toml /opt/searxng/config/limiter.toml
+  ${SUDO} cp shared/prometheus/prometheus.yml /opt/prometheus/config/prometheus.yml
+  ${SUDO} cp shared/loki/loki-config.yaml /opt/loki/config/loki-config.yaml
+  ${SUDO} cp shared/alloy/config.alloy /opt/alloy/config/config.alloy
 
   echo '  Rendering Caddyfile (basicauth hash from .env)...'
   # Extract the hash with grep/cut rather than sourcing .env: sourcing a