diff --git a/hosts/bind/default.nix b/hosts/bind/default.nix
index c3b3813a..36da798a 100644
--- a/hosts/bind/default.nix
+++ b/hosts/bind/default.nix
@@ -29,11 +29,14 @@ in
     hostName = "bind";
     firewall = {
       allowedTCPPorts = [
-        53 # DNS
-        80 443 # HTTP(s)
+        # DNS
+        53
+        # HTTP(s)
+        80 443
       ];
       allowedUDPPorts = [
-        53 # DNS
+        # DNS
+        53
       ];
     };
   };
diff --git a/hosts/mailtngbert/default.nix b/hosts/mailtngbert/default.nix
index 3008d312..6eb1625b 100644
--- a/hosts/mailtngbert/default.nix
+++ b/hosts/mailtngbert/default.nix
@@ -30,8 +30,7 @@ in
     hostName = "mailtngbert";
     firewall.allowedTCPPorts = [
       # postfix (smtp and submission)
-      25
-      587
+      25 587
       # dovecot (imap)
       143
       # managesieve
diff --git a/hosts/pulsebert/default.nix b/hosts/pulsebert/default.nix
index c7c9f702..6f2e319a 100644
--- a/hosts/pulsebert/default.nix
+++ b/hosts/pulsebert/default.nix
@@ -49,14 +49,18 @@
   networking = {
     firewall = {
       allowedTCPPorts = [
-        80 # nginx
-        443 # nginx
-        4713 # pulseaudio/pipewire network sync
-        5355 # llmnr
+        # nginx
+        80 443
+        # pulseaudio/pipewire network sync
+        4713
+        # llmnr
+        5355
       ];
       allowedUDPPorts = [
-        5353 # mdns
-        5355 # llmnr
+        # mdns
+        5353
+        # llmnr
+        5355
       ];
     };
     hostName = "pulsebert";