diff --git a/nixos/modules/burrow-headscale-policy.hujson b/nixos/modules/burrow-headscale-policy.hujson
index aed7e22..8f0bcd2 100644
--- a/nixos/modules/burrow-headscale-policy.hujson
+++ b/nixos/modules/burrow-headscale-policy.hujson
@@ -1,11 +1,11 @@
 {
   // Bootstrap with a simple allow-all policy; Burrow-specific lane segmentation
   // can be layered on once the control plane is live.
-  acls: [
+  "acls": [
     {
-      action: "accept",
-      src: ["*"],
-      dst: ["*:*"],
+      "action": "accept",
+      "src": ["*"],
+      "dst": ["*:*"],
     },
   ],
 }