diff --git a/.cruft.json b/.cruft.json
index 70ccf14..5363729 100644
--- a/.cruft.json
+++ b/.cruft.json
@@ -1,6 +1,6 @@
 {
   "template": "git@gitlab.com:agaric/python/amanita.git",
-  "commit": "8244742e86da5516002efbe79542c87b7576ea9b",
+  "commit": "cda28017bb88549bd91a5f372a8a30af818a66c9",
   "skip": [
     ".gitlab-ci.yml",
     "drush/sites/self.site.yml"
diff --git a/scripts/deploy.sh b/scripts/deploy.sh
index bcb239e..d9e0809 100755
--- a/scripts/deploy.sh
+++ b/scripts/deploy.sh
@@ -57,7 +57,7 @@ _config_dir="config" # Folder under deploy root with config
 _remote_drush="${DEPLOY_ROOT:-}/vendor/bin/drush" # Full remote path to drush used by ssh
 _update_script="scripts/update.sh"
 _web_dir="web" # Under deploy root, the Drupal public web directory
-_web_excludes="--exclude .well-known --exclude sites/default/files --exclude sites/default/settings.*.php"
+_web_excludes='--exclude "/.well-known" --exclude "/sites/default/files" --exclude "/sites/default/settings.*.php'
 # Note: `_php_settings_dir` cannot be included here; Default directly in optionals block
 
 #######################################