diff --git a/services/jellyfin/deployment.yaml b/services/jellyfin/deployment.yaml
index 4747417..a5257f1 100644
--- a/services/jellyfin/deployment.yaml
+++ b/services/jellyfin/deployment.yaml
@@ -25,9 +25,7 @@ spec:
         vault.hashicorp.com/role: "pegasus"
         vault.hashicorp.com/agent-inject-secret-ldap-config.xml: "kv/data/atlas/pegasus/jellyfin-ldap-config"
         vault.hashicorp.com/agent-inject-template-ldap-config.xml: |
-          {{ with secret "kv/data/atlas/pegasus/jellyfin-ldap-config" }}
-          {{ index .Data.data "ldap-config.xml" }}
-          {{ end }}
+          {{- with secret "kv/data/atlas/pegasus/jellyfin-ldap-config" -}}{{ index .Data.data "ldap-config.xml" }}{{- end -}}
     spec:
       serviceAccountName: pegasus-vault-sync
       # Clean up any lingering OIDC artifacts and strip the injected script tag