diff --git a/entrypoint.sh b/entrypoint.sh
index 022e9ea..0d016e4 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -2,6 +2,7 @@
 set -e
 
 # Idempotent: creates perms/roles/superuser only if missing.
+uv run alembic upgrade head
 uv run python -m scripts.seed
 
 exec uv run uvicorn app.main:app --host 0.0.0.0 --port 8000