diff --git a/deploy.sh b/deploy.sh
index 3f10252..77f7311 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -72,7 +72,11 @@ nmcli general reload 2>/dev/null || systemctl reload NetworkManager 2>/dev/null
 # restart in dependency order: bridge + members first, then hostapd enslaves the
 # radios, then dnsmasq binds br0, then NAT/failover
 systemctl restart systemd-networkd
-systemctl restart hostapd hostapd-2g van-ap-dnsmasq nftables van-failover
+systemctl restart van-ap-dnsmasq nftables van-failover
+# The AP radios live on the USB hub and may be absent; the start then fails but
+# Restart=always keeps retrying and claims them the moment they enumerate.
+systemctl restart hostapd hostapd-2g \
+    || echo "   -> hostapd(-2g) waiting for AP radios (USB hub not plugged in)" 
 # AP watchdogs last, after hostapd is back up (they only ever restart a wedged hostapd)
 systemctl restart van-ap-watchdog van-ap-watchdog-2g
 networkctl reload 2>/dev/null || true