diff --git a/deploy/bootstrap/init.sh b/deploy/bootstrap/init.sh
index 36d1b24..1e0b290 100755
--- a/deploy/bootstrap/init.sh
+++ b/deploy/bootstrap/init.sh
@@ -188,15 +188,17 @@ step_monitor() {
   fi
   install -m 755 "$SCRIPT_DIR/monitor/pangolin-monitor.sh" /usr/local/bin/pangolin-monitor
   umask 077
+  # 含空格的值必须加引号:此文件既被 systemd EnvironmentFile 读,也被 monitor 脚本
+  # `source`(shell),后者遇未引号的空格会把 "sing-box pangolin-agent" 拆成跑命令。
   cat > /etc/pangolin-monitor.env <<MENV
 TELEGRAM_BOT_TOKEN=${TELEGRAM_BOT_TOKEN}
 TELEGRAM_CHAT_ID=${TELEGRAM_CHAT_ID}
-NODE_NAME=${NODE_NAME}
+NODE_NAME="${NODE_NAME}"
 CPU_ALERT_PCT=${CPU_ALERT_PCT}
 MEM_ALERT_PCT=${MEM_ALERT_PCT}
 DISK_ALERT_PCT=${DISK_ALERT_PCT}
-MONITOR_UNITS=${MONITOR_UNITS}
-MONITOR_NET_PROBE=${MONITOR_NET_PROBE}
+MONITOR_UNITS="${MONITOR_UNITS}"
+MONITOR_NET_PROBE="${MONITOR_NET_PROBE}"
 MONITOR_SEND_OK_PULSE=${MONITOR_SEND_OK_PULSE}
 MENV
   umask 022