diff --git a/roles/git_auto_update/templates/update.sh b/roles/git_auto_update/templates/update.sh
index 07f1340..48cede2 100644
--- a/roles/git_auto_update/templates/update.sh
+++ b/roles/git_auto_update/templates/update.sh
@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
 
+set -euo pipefail;
+
 readonly REPO={{ repo | quote }};
 readonly DEST={{ dest | quote }};
 readonly DEST_USER={{ owner | quote }};
@@ -7,8 +9,6 @@ readonly DEST_GROUP={{ group | quote }};
 readonly PREFIX={{ tag_prefix | quote }};
 readonly GPG_FINGERPRINT={{ gpg_fingerprint | quote }};
 
-set -euo pipefail;
-
 cd "$DEST";
 
 if [ ! -d .git ]; then