diff --git a/doc/overlay/etc/uci-defaults/40-hostname b/doc/overlay/etc/uci-defaults/40-hostname
index 71fa2fa..1724e95 100644
--- a/doc/overlay/etc/uci-defaults/40-hostname
+++ b/doc/overlay/etc/uci-defaults/40-hostname
@@ -1,3 +1,5 @@
+#!/bin/sh
+
 MODEL=$(cat /etc/board.json | jsonfilter -e '@["model"]["id"]')
 
 # Hostname prefix
diff --git a/doc/overlay/etc/uci-defaults/60-cron b/doc/overlay/etc/uci-defaults/60-cron
index ae31dde..43ed67c 100644
--- a/doc/overlay/etc/uci-defaults/60-cron
+++ b/doc/overlay/etc/uci-defaults/60-cron
@@ -1,3 +1,5 @@
+#!/bin/sh
+
 # Randomize restart time
 OFFSET=$(awk -v min=1 -v max=59 'BEGIN{srand(); print int(min+rand()*(max-min+1))}')
 
diff --git a/doc/overlay/etc/uci-defaults/90-certidude-sysupgrade b/doc/overlay/etc/uci-defaults/90-certidude-sysupgrade
new file mode 100644
index 0000000..4aea985
--- /dev/null
+++ b/doc/overlay/etc/uci-defaults/90-certidude-sysupgrade
@@ -0,0 +1,6 @@
+#!/bin/sh
+echo $AUTHORITY_PATH >> /etc/sysupgrade.conf
+echo $CERTIFICATE_PATH >> /etc/sysupgrade.conf
+echo $KEY_PATH >> /etc/sysupgrade.conf
+echo $REQUEST_PATH >> /etc/sysupgrade.conf
+
diff --git a/doc/overlay/usr/bin/certidude-enroll b/doc/overlay/usr/bin/certidude-enroll
index 7518378..ea1b620 100755
--- a/doc/overlay/usr/bin/certidude-enroll
+++ b/doc/overlay/usr/bin/certidude-enroll
@@ -122,11 +122,6 @@ logger -t certidude -s "Certificate md5sum: $(md5sum -b $CERTIFICATE_PATH.part)"
 
 uci commit
 
-echo $AUTHORITY_PATH >> /etc/sysupgrade.conf
-echo $CERTIFICATE_PATH >> /etc/sysupgrade.conf
-echo $KEY_PATH >> /etc/sysupgrade.conf
-echo $REQUEST_PATH >> /etc/sysupgrade.conf
-
 mv $CERTIFICATE_PATH.part $CERTIFICATE_PATH
 
 # Start services