diff --git a/CHANGELOG.md b/CHANGELOG.md
index bcccccd..c71ceff 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,7 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased] - yyyy-mm-dd
 
 In this release garnix has been replaced with our own binary cache as garnix has shutdown.
-This is a breaking change to your configuration if you previously 
+This is a breaking change to your configuration if you previously
 used garnix to download wire.
 
 Please read https://wire.forall.systems/guides/installation.html#binary-cache
diff --git a/doc/guides/non-root-user.md b/doc/guides/non-root-user.md
index 73a0e44..60d9c11 100644
--- a/doc/guides/non-root-user.md
+++ b/doc/guides/non-root-user.md
@@ -78,6 +78,7 @@ For example, doas:
 ```
 
 Note that `run0` requires the `--pipe` argument:
+
 ```nix
 {
   deployment.privilegeEscalationCommand = [
diff --git a/doc/tutorial/part-one/nix-setup.md b/doc/tutorial/part-one/nix-setup.md
index 61c7099..32e3072 100644
--- a/doc/tutorial/part-one/nix-setup.md
+++ b/doc/tutorial/part-one/nix-setup.md
@@ -31,7 +31,7 @@ nix (Nix) 2.11.0
 Because wire can be heavy to compile, it is distributed with a [binary
 cache](https://wiki.nixos.org/wiki/Binary_Cache).
 
-You must enable the binary cache or you will be 
+You must enable the binary cache or you will be
 compiling everything from source:
 
 ::: code-group