diff --git a/scripts/88-update-wrapper.sh b/scripts/88-update-wrapper.sh
index 9da2c9f..ac72172 100644
--- a/scripts/88-update-wrapper.sh
+++ b/scripts/88-update-wrapper.sh
@@ -75,6 +75,9 @@ echo "running" > "$STATE_DIR/state"
       SRC="/opt/mailwolt-installer"
     fi
 
+    # <<< NEU: root darf dieses Repo lesen (gegen 'dubious ownership')
+    git config --global --add safe.directory "$SRC" || true
+
     # falls shallow: Tags nachziehen
     if [ -f "$SRC/.git/shallow" ]; then
       git -C "$SRC" fetch --unshallow --quiet || true