diff --git a/lib/mkHost.nix b/lib/mkHost.nix
index 8205b6d..2b8a0d1 100644
--- a/lib/mkHost.nix
+++ b/lib/mkHost.nix
@@ -90,7 +90,13 @@ nixpkgs.lib.nixosSystem {
     # TEMP:(@janezicmatej) temporary mitigation for dirty frag
     # blocks esp4/esp6 (CVE-2026-43284) and rxrpc (CVE-2026-43500)
     # remove once nixpkgs ships a kernel with f4c50a4034e6 and the rxrpc fix
-    { boot.blacklistedKernelModules = [ "esp4" "esp6" "rxrpc" ]; }
+    {
+      boot.blacklistedKernelModules = [
+        "esp4"
+        "esp6"
+        "rxrpc"
+      ];
+    }
 
     featureEnableModule
     hostConfig