diff --git a/rootfs/etc/confd/templates/server.yaml.tmpl b/rootfs/etc/confd/templates/server.yaml.tmpl
index 3eb803f..263b6d1 100644
--- a/rootfs/etc/confd/templates/server.yaml.tmpl
+++ b/rootfs/etc/confd/templates/server.yaml.tmpl
@@ -2025,14 +2025,13 @@ sso:
     #client_whitelist:
     #  - https://riot.im/develop
     #  - https://my.custom.client/
-	client_whitelist: {{if not (getenv "SSO_CLIENT_WHITELIST")}}[]{{end}}
+    client_whitelist: {{if not (getenv "SSO_CLIENT_WHITELIST")}}[]{{end}}
     {{- if (getenv "SSO_CLIENT_WHITELIST")}}
     {{- range $client := split (getenv "SSO_CLIENT_WHITELIST") ";"}}
       - {{ $client -}}
     {{end}}
     {{end}}
 
-
     # Uncomment to keep a user's profile fields in sync with information from
     # the identity provider. Currently only syncing the displayname is
     # supported. Fields are checked on every SSO login, and are updated