diff --git a/default.nix b/default.nix
index 95704b8..fea33ad 100644
--- a/default.nix
+++ b/default.nix
@@ -834,12 +834,12 @@ in
         type = types.nullOr types.int;
         default = if cfg.dkimDomainPrivateKeyFiles == null then 1024 else null;
         description = ''
-            How many bits in generated DKIM keys. RFC6376 advises minimum 1024-bit keys.
+          How many bits in generated DKIM keys. RFC6376 advises minimum 1024-bit keys.
 
-            If you have already deployed a key with a different number of bits than specified
-            here, then you should use a different selector ({option}`mailserver.dkimSelector`). In order to get
-            this package to generate a key with the new number of bits, you will either have to
-            change the selector or delete the old key file.
+          If you have already deployed a key with a different number of bits than specified
+          here, then you should use a different selector ({option}`mailserver.dkimSelector`). In order to get
+          this package to generate a key with the new number of bits, you will either have to
+          change the selector or delete the old key file.
         '';
     };