diff --git a/scripts/backup-postgres.sh b/scripts/backup-postgres.sh
index fa2d461..abe63d4 100755
--- a/scripts/backup-postgres.sh
+++ b/scripts/backup-postgres.sh
@@ -26,14 +26,15 @@ echo "[$(date -u +%FT%TZ)] dump created size=${SIZE}B path=${DUMP_FILE}"
 
 # Push vers MinIO via mc Docker
 docker run --rm --network karbe-net \
+  --entrypoint /bin/sh \
   -v "$DUMP_DIR:/dump" \
-  minio/mc:latest sh -c "
+  -e MINIO_ROOT_USER \
+  -e MINIO_ROOT_PASSWORD \
+  minio/mc:latest -c "
     mc alias set karbe http://minio:9000 \"\$MINIO_ROOT_USER\" \"\$MINIO_ROOT_PASSWORD\" >/dev/null 2>&1 && \
     mc mb karbe/karbe-backups --ignore-existing >/dev/null 2>&1 && \
     mc cp /dump/karbe-${STAMP}.sql.gz karbe/${BUCKET_DEST}
-  " \
-  -e MINIO_ROOT_USER \
-  -e MINIO_ROOT_PASSWORD
+  "
 
 echo "[$(date -u +%FT%TZ)] uploaded to karbe/${BUCKET_DEST}"
 
@@ -41,11 +42,13 @@ echo "[$(date -u +%FT%TZ)] uploaded to karbe/${BUCKET_DEST}"
 rm -f "$DUMP_FILE"
 
 # Rétention : supprime les backups > 30 jours dans MinIO
-docker run --rm --network karbe-net minio/mc:latest sh -c "
-  mc alias set karbe http://minio:9000 \"\$MINIO_ROOT_USER\" \"\$MINIO_ROOT_PASSWORD\" >/dev/null 2>&1 && \
-  mc rm --recursive --force --older-than 30d karbe/karbe-backups/ 2>/dev/null || true
-" \
+docker run --rm --network karbe-net \
+  --entrypoint /bin/sh \
   -e MINIO_ROOT_USER \
-  -e MINIO_ROOT_PASSWORD
+  -e MINIO_ROOT_PASSWORD \
+  minio/mc:latest -c "
+    mc alias set karbe http://minio:9000 \"\$MINIO_ROOT_USER\" \"\$MINIO_ROOT_PASSWORD\" >/dev/null 2>&1 && \
+    mc rm --recursive --force --older-than 30d karbe/karbe-backups/ 2>/dev/null || true
+  "
 
 echo "[$(date -u +%FT%TZ)] retention sweep done (>30d removed)"