diff --git a/Makefile b/Makefile
index ed901d3..05f6912 100644
--- a/Makefile
+++ b/Makefile
@@ -144,7 +144,7 @@ deploy: clean build sign
 	# fails (auth, branch protection, network), abort before touching
 	# the VPS so the public source repo and the live site stay in sync.
 	git push -u origin main
-	rsync -avz --delete _site/ $(VPS_USER)@$(VPS_HOST):$(VPS_PATH)/
+	rsync -avz --delete _site/ "$(VPS_USER)@$(VPS_HOST):$(VPS_PATH)/"
 
 watch: export SITE_ENV = dev
 watch: