diff --git a/deploy/deploy.sh b/deploy/deploy.sh
index 27860d5..484696a 100755
--- a/deploy/deploy.sh
+++ b/deploy/deploy.sh
@@ -42,10 +42,8 @@ exec 9>"$LOCK_FILE"
 flock 9
 log "Starting deploy (ROOT=$ROOT)"
 
-git config --global --add safe.directory "$APP_DIR" || true
-
 log "Git: fetch origin"
-git -C "$APP" fetch origin
+git -c safe.directory="$APP_DIR" -C "$APP_DIR" fetch origin || true
 
 log "Git: checkout main && reset --hard origin/main"
 git -C "$APP" checkout main