diff --git a/scripts/setup-frp-remote.sh b/scripts/setup-frp-remote.sh
index abdea6a..6875f2b 100755
--- a/scripts/setup-frp-remote.sh
+++ b/scripts/setup-frp-remote.sh
@@ -17,9 +17,10 @@ rbw get "frp home-tunnel" > "$TMPTOKEN"
 chmod 600 "$TMPTOKEN"
 
 echo "==> 上传 token 与脚本到 $NAS_HOST:/tmp/frp-setup/"
+# 用 ssh cat 管道而非 scp：DSM 默认没开 SFTP 子系统，新版 scp(走SFTP协议)会 Connection closed
 ssh "$NAS_HOST" 'mkdir -p /tmp/frp-setup && chmod 700 /tmp/frp-setup'
-scp -q "$TMPTOKEN" "$NAS_HOST:/tmp/frp-setup/token"
-scp -q setup-frp-on-nas.sh "$NAS_HOST:/tmp/frp-setup/"
+ssh "$NAS_HOST" 'cat > /tmp/frp-setup/token && chmod 600 /tmp/frp-setup/token' < "$TMPTOKEN"
+ssh "$NAS_HOST" 'cat > /tmp/frp-setup/setup-frp-on-nas.sh' < setup-frp-on-nas.sh
 rm -f "$TMPTOKEN"
 
 echo "==> 在 NAS 上执行（sudo 步骤会提示输入 DSM 密码）"