diff --git a/scripts/install.sh b/scripts/install.sh
index 26017fb..b148d99 100755
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -323,7 +323,7 @@ migrate_hecate_config() {
       changed=1
     fi
     if ! grep -Eq '^  - titan-04$' "${CONF_DIR}/hecate.yaml" || ! grep -Eq '^  - titan-21$' "${CONF_DIR}/hecate.yaml"; then
-      perl -0pi -e 's#ssh_managed_nodes:\n(?:  - .*\n)*#'"${managed_block}"'\n#s' "${CONF_DIR}/hecate.yaml"
+      perl -0pi -e 's#ssh_managed_nodes:\n(?:  - [^\n]*\n)*#'"${managed_block}"'\n#s' "${CONF_DIR}/hecate.yaml"
       echo "[install] refreshed ssh_managed_nodes coverage for role=${role}"
       changed=1
     fi
@@ -340,7 +340,7 @@ migrate_hecate_config() {
     fi
 
     if ! grep -Eq '^  - services/gitea$' "${CONF_DIR}/hecate.yaml"; then
-      perl -0pi -e 's#local_bootstrap_paths:\n(?:  - .*\n)*#local_bootstrap_paths:\n  - infrastructure/core\n  - clusters/atlas/flux-system\n  - infrastructure/sources/helm\n  - infrastructure/metallb\n  - infrastructure/traefik\n  - infrastructure/vault-csi\n  - infrastructure/vault-injector\n  - services/vault\n  - infrastructure/postgres\n  - services/gitea\n#s' "${CONF_DIR}/hecate.yaml"
+      perl -0pi -e 's#local_bootstrap_paths:\n(?:  - [^\n]*\n)*#local_bootstrap_paths:\n  - infrastructure/core\n  - clusters/atlas/flux-system\n  - infrastructure/sources/helm\n  - infrastructure/metallb\n  - infrastructure/traefik\n  - infrastructure/vault-csi\n  - infrastructure/vault-injector\n  - services/vault\n  - infrastructure/postgres\n  - services/gitea\n#s' "${CONF_DIR}/hecate.yaml"
       echo "[install] refreshed peer local_bootstrap_paths for full fallback bootstrap parity"
       changed=1
     fi