diff --git a/hosts/fw.cloonar.com/modules/firewall.nix b/hosts/fw.cloonar.com/modules/firewall.nix
index c917371..4b5f753 100644
--- a/hosts/fw.cloonar.com/modules/firewall.nix
+++ b/hosts/fw.cloonar.com/modules/firewall.nix
@@ -99,7 +99,7 @@
               oifname { "wan", "wrwks", "wg_epicenter", "wg_ghetto_at" } masquerade
               # iifname { "vb-*" } oifname { "server" } masquerade comment "from internal interfaces"
             }
-          ''
+          '';
         };
       };
     };