diff --git a/deploy/push.sh b/deploy/push.sh
index b3ad0e5..a7f25d1 100755
--- a/deploy/push.sh
+++ b/deploy/push.sh
@@ -62,6 +62,14 @@ $TAR --exclude .venv --exclude .env --exclude __pycache__ \
     --exclude '*.db' --exclude tests --exclude .pytest_cache \
     -C "$REPO/backend" . | sh_ "tar xzf - -C '$APP/backend'"
 
+# The restart below runs the NAS's own copies of stop.sh / start.sh, so they
+# have to travel with the code — otherwise a fix to them lands in git, the
+# deploy reports success, and the far side keeps running the old ones. That is
+# exactly how the broken pgrep guards survived a deploy that was meant to fix
+# them.
+echo "==> deploy scripts"
+$TAR -C "$REPO/deploy" . | sh_ "tar xzf - -C '$APP/deploy'"
+
 echo "==> static (cleared first, so stale JS chunks do not pile up)"
 if [ ! -f "$REPO/client/build/index.html" ]; then
   echo "client/build is missing — run 'npm run build' first" >&2