diff --git a/nixos/modules/issuer.nix b/nixos/modules/issuer.nix
index 88413333047313838ef0859dc039c0dd984c6fbb..d2d6b9f201652440652962983866bd10b01b4e42 100644
--- a/nixos/modules/issuer.nix
+++ b/nixos/modules/issuer.nix
@@ -34,7 +34,7 @@ in {
     };
     services.private-storage-issuer.issuer = lib.mkOption {
       default = "Ristretto";
-      type = lib.types.enum [ " Trivial" "Ristretto" ];
+      type = lib.types.enum [ "Trivial" "Ristretto" ];
       example = lib.literalExample "Trivial";
       description = ''
         The issuer algorithm to use.  Either Trivial for a fake no-crypto