diff --git a/nixos/modules/security/pam.nix b/nixos/modules/security/pam.nix
index 6a4f6634c4b3..f6ca6877022e 100644
--- a/nixos/modules/security/pam.nix
+++ b/nixos/modules/security/pam.nix
@@ -301,11 +301,11 @@ let
            session required pam_env.so envfile=${config.system.build.pamEnvironment}
          '' + ''
            session required pam_unix.so
-         '' + optionalString cfg.setLoginUid
-              "session ${
-                if config.boot.isContainer then "optional" else "required"
-              } pam_loginuid.so"
-         + optionalString cfg.makeHomeDir ''
+         '' + optionalString cfg.setLoginUid ''
+            session ${
+              if config.boot.isContainer then "optional" else "required"
+            } pam_loginuid.so
+         '' + optionalString cfg.makeHomeDir ''
            session required ${pkgs.pam}/lib/security/pam_mkhomedir.so silent skel=/etc/skel umask=0022
          '' + optionalString cfg.updateWtmp ''
            session required ${pkgs.pam}/lib/security/pam_lastlog.so silent