diff --git a/deploy.sh b/deploy.sh
index 202bc26..07ab167 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -179,6 +179,10 @@ ZORAXY_APP
 }
 ZORAXY_DNS
 
+    # Lock proxy configs so Zoraxy cannot rewrite them (clearing OriginIpOrDomain)
+    echo "[*] Locking proxy configs (chattr +i)..."
+    chattr -R +i "$TARGET_DIR/config/zoraxy/conf/proxy/" 2>/dev/null || true
+
     # Copy launcher config files
     cp -r config/nextworkspace/* "$TARGET_DIR/config/nextworkspace/"
 
@@ -323,7 +327,10 @@ else
         cp config/nextworkspace/apps.yaml "$TARGET_DIR/config/nextworkspace/apps.yaml"
     fi
     if [ -d config/zoraxy/conf/proxy ]; then
+        # Unlock, copy, re-lock to prevent Zoraxy from clearing OriginIpOrDomain
+        chattr -R -i "$TARGET_DIR/config/zoraxy/conf/proxy/" 2>/dev/null || true
         cp config/zoraxy/conf/proxy/* "$TARGET_DIR/config/zoraxy/conf/proxy/" 2>/dev/null || true
+        chattr -R +i "$TARGET_DIR/config/zoraxy/conf/proxy/" 2>/dev/null || true
     fi
 
     echo "[6/6] Restarting Zoraxy and launcher..."