diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..cba3316
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,2 @@
+# Shell scripts must use LF — CRLF in shebang breaks systemd (status=203/EXEC).
+*.sh text eol=lf
diff --git a/deploy/sac-deploy.sh b/deploy/sac-deploy.sh
index 56db75c..e54f2ee 100644
--- a/deploy/sac-deploy.sh
+++ b/deploy/sac-deploy.sh
@@ -95,6 +95,7 @@ if [ -f "${APP_ROOT}/deploy/systemd/${SERVICE_NAME}.service" ]; then
 fi
 START_SH="${APP_ROOT}/deploy/systemd/sac-api-start.sh"
 if [ -f "${START_SH}" ]; then
+ sed -i 's/\r$//' "${START_SH}"
  chmod 755 "${START_SH}"
 fi