I thought I was being lazy, but this has been working for me for years.

I didn't do --bare, the live branch is checked out and I merge in dev to deploy.