diff --git a/scripts/update-and-restart.sh b/scripts/update-and-restart.sh
index bed8684..eddf0e2 100755
--- a/scripts/update-and-restart.sh
+++ b/scripts/update-and-restart.sh
@@ -48,9 +48,9 @@ fi
 
 log '备份 MySQL 数据库'
 install -d -m 700 "$BACKUP_DIR"
-umask 077
 BACKUP_FILE="$BACKUP_DIR/ameiba_cms_$(date '+%Y%m%d_%H%M%S').sql.gz"
 (
+  umask 077
   set -a
   # shellcheck disable=SC1090
   source "$CMS_ENV_FILE"
@@ -79,6 +79,8 @@ git pull --ff-only origin "$BRANCH"
 log '安装前台依赖并构建'
 npm ci --include=dev
 npm run build
+find "$PROJECT_DIR/dist" -type d -exec chmod 755 {} +
+find "$PROJECT_DIR/dist" -type f -exec chmod 644 {} +
 
 log '安装 CMS 后端生产依赖'
 (
@@ -91,6 +93,8 @@ log '构建 CMS 管理后台'
   cd "$PROJECT_DIR/cms/admin"
   npm ci --include=dev
   npm run build
+  find "$PROJECT_DIR/cms/admin/dist" -type d -exec chmod 755 {} +
+  find "$PROJECT_DIR/cms/admin/dist" -type f -exec chmod 644 {} +
 )
 
 log '重启 CMS 服务并保存 PM2 进程清单'