diff --git a/Makefile b/Makefile
index b4556b5..907f9c5 100644
--- a/Makefile
+++ b/Makefile
@@ -433,6 +433,12 @@ up: check-docker
 	@docker exec -u www-data $(DOCKER_NAME) php occ config:system:set apps_paths 1 writable --value=true  --type=boolean        >/dev/null
 	@echo ">> enabling exelearning"
 	@docker exec -u www-data $(DOCKER_NAME) php occ app:enable exelearning
+	@# The first-run wizard opens a modal over the whole page on first login. In a dev
+	@# container that is pure noise, and it actively breaks automated checks: it covers
+	@# the content iframe, which the external-media host correctly reads as "obscured"
+	@# and hides every promoted player behind it.
+	@echo ">> disabling the first-run wizard"
+	@docker exec -u www-data $(DOCKER_NAME) php occ app:disable firstrunwizard >/dev/null 2>&1 || true
 	@# `.elp(x)` → MIME mapping + icon alias. These are the only pieces
 	@# a Nextcloud app cannot ship by itself: both files are read from
 	@# /var/www/html/config/. See README → "Custom MIME types" for the