From c7a72b465e61172cdaf7f328e8ee7cee9a51701e Mon Sep 17 00:00:00 2001
From: Frank <frank@dankware>
Date: Tue, 25 Aug 2026 16:53:13 -0700
Subject: [PATCH] Fix privileged shared config deployment

---
 scripts/deploy.sh | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index 94e5c52..639924b 100755
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -154,11 +154,11 @@ fi
 if [ '${COPY_SHARED[$TARGET]}' = '1' ]; then
   echo '[3/5] Copying shared configs into place...'
   mkdir -p /opt/searxng/config /opt/prometheus/config /opt/loki/config /opt/alloy/config
-  cp shared/searxng/settings.yml /opt/searxng/config/settings.yml
-  cp shared/searxng/limiter.toml /opt/searxng/config/limiter.toml
-  cp shared/prometheus/prometheus.yml /opt/prometheus/config/prometheus.yml
-  cp shared/loki/loki-config.yaml /opt/loki/config/loki-config.yaml
-  cp shared/alloy/config.alloy /opt/alloy/config/config.alloy
+  ${SUDO} cp shared/searxng/settings.yml /opt/searxng/config/settings.yml
+  ${SUDO} cp shared/searxng/limiter.toml /opt/searxng/config/limiter.toml
+  ${SUDO} cp shared/prometheus/prometheus.yml /opt/prometheus/config/prometheus.yml
+  ${SUDO} cp shared/loki/loki-config.yaml /opt/loki/config/loki-config.yaml
+  ${SUDO} cp shared/alloy/config.alloy /opt/alloy/config/config.alloy
 
   echo '  Rendering Caddyfile (basicauth hash from .env)...'
   # Extract the hash with grep/cut rather than sourcing .env: sourcing a