diff --git a/modules/prometheus/alert-rules.nix b/modules/prometheus/alert-rules.nix
index 1d5fd884..b2f2a116 100644
--- a/modules/prometheus/alert-rules.nix
+++ b/modules/prometheus/alert-rules.nix
@@ -199,8 +199,8 @@ lib.mapAttrsToList
       };
     */
     cert_expiry = {
-     condition = "(probe_ssl_earliest_cert_expiry - time())/(3600*24) < 30";
-     description = "{{$labels.instance}}: The TLS certificate will expire in less than 30 days: {{$value}}s";
+      condition = "(probe_ssl_earliest_cert_expiry - time())/(3600*24) < 30";
+      description = "{{$labels.instance}}: The TLS certificate will expire in less than 30 days: {{$value}}s";
     };
 
     # ignore devices that disabled S.M.A.R.T (example if attached via USB)