diff --git a/nix/docker/heptapod/default.nix b/nix/docker/heptapod/default.nix
index 357cb14fc9..3266bf394c 100644
--- a/nix/docker/heptapod/default.nix
+++ b/nix/docker/heptapod/default.nix
@@ -24,10 +24,10 @@ in pkgs.dockerTools.buildImage rec {
   runAsRoot = ''
     #!{pkgs.runtimeShell}
     cat <<"EOF" >/assets/wrapper_wrapper
-      #!/bin/bash
-      /usr/bin/id hg || /usr/sbin/useradd -g $(id -u git) -u $(id -g git) -o -d /var/opt/gitlab -p "*" hg
-      /usr/bin/grep "AllowUsers git hg" /assets/sshd_config || /bin/sed -i "s/AllowUsers git/AllowUsers git hg/" /assets/sshd_config
-      exec /assets/wrapper "$@"
+    #!/bin/bash
+    /usr/bin/id hg || /usr/sbin/useradd -g $(id -u git) -u $(id -g git) -o -d /var/opt/gitlab -p "*" hg
+    /usr/bin/grep "AllowUsers git hg" /assets/sshd_config || /bin/sed -i "s/AllowUsers git/AllowUsers git hg/" /assets/sshd_config
+    exec /assets/wrapper "$@"
     EOF
     chmod ugo=rx /assets/wrapper_wrapper
   '';