diff --git a/Cargo.lock b/Cargo.lock
index 1792389..e80b2e1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1154,7 +1154,7 @@ checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
 
 [[package]]
 name = "webnsupdate"
-version = "0.2.0"
+version = "0.2.1"
 dependencies = [
  "axum",
  "axum-auth",
diff --git a/Cargo.toml b/Cargo.toml
index c428844..0967cf2 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -2,7 +2,7 @@ cargo-features = ["codegen-backend"]
 [package]
 description = "An HTTP server using HTTP basic auth to make secure calls to nsupdate"
 name = "webnsupdate"
-version = "0.2.0"
+version = "0.2.1"
 edition = "2021"
 
 [dependencies]
diff --git a/module.nix b/module.nix
index e44b2a5..2f3834d 100644
--- a/module.nix
+++ b/module.nix
@@ -107,20 +107,21 @@ in {
       if cfg.recordsFile != null
       then cfg.recordsFile
       else pkgs.writeText "webnsrecords" cfg.records;
-    args = lib.strings.escapeShellArgs [
-      "--records"
-      recordsFile
-      "--key-file"
-      cfg.keyFile
-      "--password-file"
-      cfg.passwordFile
-      "--address"
-      cfg.bindIp
-      "--port"
-      (builtins.toString cfg.bindPort)
-      "--ttl"
-      (builtins.toString cfg.ttl)
-    ] ++ cfg.extraArgs;
+    args = lib.strings.escapeShellArgs ([
+        "--records"
+        recordsFile
+        "--key-file"
+        cfg.keyFile
+        "--password-file"
+        cfg.passwordFile
+        "--address"
+        cfg.bindIp
+        "--port"
+        (builtins.toString cfg.bindPort)
+        "--ttl"
+        (builtins.toString cfg.ttl)
+      ]
+      ++ cfg.extraArgs);
     cmd = "${lib.getExe pkgs.webnsupdate} ${args}";
   in
     lib.mkIf cfg.enable {