diff --git a/nixos/modules/monitoring/vpn/client.nix b/nixos/modules/monitoring/vpn/client.nix
index 93828a5ba03e44902339fcfa14a23784fa3de333..8c443321a30ff4c712e3dbba8db0faad5c281973 100644
--- a/nixos/modules/monitoring/vpn/client.nix
+++ b/nixos/modules/monitoring/vpn/client.nix
@@ -12,8 +12,6 @@ in {
       default = /var/secrets/monitoringvpn/client.key;
       description = ''
         File with base64 private key generated by <command>wg genkey</command>.
-        Shorthand for public and private key:
-        <command>wg genkey | tee peer_A.key | wg pubkey > peer_A.pub</command>
       '';
     };
     publicKeyFile = lib.mkOption {
@@ -21,8 +19,11 @@ in {
       example = lib.literalExample /var/secrets/monitoringvpn/host.pub;
       description = ''
         File with base64 public key generated by <command>cat private.key | wg pubkey > pubkey.pub</command>.
+        Cannot have white space or new lines.
         Shorthand for public and private key:
         <command>wg genkey | tee peer_A.key | wg pubkey > peer_A.pub</command>
+        TBD the pub files must not have white space or new lines, remove with
+        them, for example <command>perl -pe 's/\s+//g'</command>
       '';
     };
     presharedKeyFile = lib.mkOption {