diff --git a/hosts/containers/public-access-proxy/proxy.nix b/hosts/containers/public-access-proxy/proxy.nix
index c5dfa86a..8f035fc4 100644
--- a/hosts/containers/public-access-proxy/proxy.nix
+++ b/hosts/containers/public-access-proxy/proxy.nix
@@ -91,13 +91,15 @@ in {
           option forwardfor
           http-request set-header X-Forwarded-Proto http
           http-request set-header X-Forwarded-Port 80
-        ${
+          ${
             concatMapStringsSep "\n" (proxyHost:
               optionalString
               (proxyHost.hostNames != [ ] && proxyHost.proxyTo.host != null)
               (concatMapStringsSep "\n" (hostname: ''
-                ${"  "}use-server ${hostname}-http if { req.hdr(host) -i ${hostname} }
-                ${"  "}server ${hostname}-http ${proxyHost.proxyTo.host}:${toString proxyHost.proxyTo.httpPort}
+                use-server ${hostname}-http if { req.hdr(host) -i ${hostname} }
+                server ${hostname}-http ${proxyHost.proxyTo.host}:${
+                  toString proxyHost.proxyTo.httpPort
+                }
               '') (proxyHost.hostNames))) (cfg.proxyHosts)
           }
 
@@ -113,13 +115,15 @@ in {
           option http-server-close
           http-request set-header X-Forwarded-Proto https
           http-request set-header X-Forwarded-Port 443
-        ${
+          ${
             concatMapStringsSep "\n" (proxyHost:
               optionalString
               (proxyHost.hostNames != [ ] && proxyHost.proxyTo.host != null)
               (concatMapStringsSep "\n" (hostname: ''
-                ${"  "}use-server ${hostname}-https if { req_ssl_sni -i ${hostname} }
-                ${"  "}server ${hostname}-https ${proxyHost.proxyTo.host}:${toString proxyHost.proxyTo.httpsPort}
+                use-server ${hostname}-https if { req.ssl_sni -i ${hostname} }
+                server ${hostname}-https ${proxyHost.proxyTo.host}:${
+                  toString proxyHost.proxyTo.httpsPort
+                }
               '') (proxyHost.hostNames))) (cfg.proxyHosts)
           }
       '';