diff --git a/scripts/backup.sh b/scripts/backup.sh
index 7ab0aaa..b84a5ab 100755
--- a/scripts/backup.sh
+++ b/scripts/backup.sh
@@ -39,9 +39,12 @@ docker compose -f "$PROJECT_DIR/docker-compose.yml" \
     --triggers \
     steuerkram > "$BACKUP_DIR/steuerkram_db_$TIMESTAMP.sql"
 
-# Uploads sichern
-tar -czf "$BACKUP_DIR/steuerkram_uploads_$TIMESTAMP.tar.gz" \
-    -C "$PROJECT_DIR" uploads/
+# Uploads sichern (im Container ausführen – umgeht Host-Berechtigungen auf Bind-Mount-Dateien)
+docker compose -f "$PROJECT_DIR/docker-compose.yml" \
+    --project-directory "$PROJECT_DIR" \
+    exec -T web \
+    tar -czf - -C /var/www/html/public/static uploads/ \
+    > "$BACKUP_DIR/steuerkram_uploads_$TIMESTAMP.tar.gz"
 
 echo "  DB:      $BACKUP_DIR/steuerkram_db_$TIMESTAMP.sql"
 echo "  Uploads: $BACKUP_DIR/steuerkram_uploads_$TIMESTAMP.tar.gz"