diff --git a/roles/reverse_proxy/templates/Caddyfile.j2 b/roles/reverse_proxy/templates/Caddyfile.j2
index a14ec68..c9da8f5 100644
--- a/roles/reverse_proxy/templates/Caddyfile.j2
+++ b/roles/reverse_proxy/templates/Caddyfile.j2
@@ -1,9 +1,9 @@
 # {{ ansible_managed }}
 {
   email {{ reverse_proxy__acme_email }}
-{%- if reverse_proxy__acme_ca %}
+{% if reverse_proxy__acme_ca %}
   acme_ca {{ reverse_proxy__acme_ca }}
-{%- endif %}
+{% endif %}
 {% if reverse_proxy__acme_dns_provider == 'gandi' %}
   # ACME DNS-01 via Gandi (mesh/LAN-only hosts, incl. wildcard certs). Token is the
   # Gandi PAT, injected from the env file as a Bearer token (ADR-024). Needs the custom
@@ -13,9 +13,9 @@
 }
 {% for r in reverse_proxy__routes %}
 {{ r['host'] }} {
-{%- if reverse_proxy__tls_internal %}
+{% if reverse_proxy__tls_internal %}
   tls internal
-{%- endif %}
+{% endif %}
 {% if r['caddy'] is defined %}
 {{ r['caddy'] | trim | indent(2, first=true) }}
 {% elif r['upstream'] is defined %}