diff --git a/atprotopds/ansible/roles/pds/defaults/main.yaml b/atprotopds/ansible/roles/pds/defaults/main.yaml
index aca853e..5545cb4 100644
--- a/atprotopds/ansible/roles/pds/defaults/main.yaml
+++ b/atprotopds/ansible/roles/pds/defaults/main.yaml
@@ -44,10 +44,10 @@ pds_blob_upload_limit: "104857600"
 # in .env.local.op (1Password) to store blobs in DigitalOcean Spaces — the
 # bucket is provisioned by terraform (terraform/spaces.tf). Bucket/endpoint/region
 # below must match terraform/variables.tf (var.spaces_bucket_name, var.region).
-pds_blobstore_s3_bucket: "devict-pds-blobs"         # must match terraform var.spaces_bucket_name
-pds_blobstore_s3_endpoint: "https://nyc3.digitaloceanspaces.com"  # region endpoint; must match terraform var.region
-pds_blobstore_s3_region: "us-east-1"               # AWS SDK region (DO ignores it; the endpoint encodes the datacenter)
-pds_blobstore_s3_force_path_style: "false"         # virtual-hosted style (DO recommendation)
+pds_blobstore_s3_bucket: "devict-pds-blobs" # must match terraform var.spaces_bucket_name
+pds_blobstore_s3_endpoint: "https://nyc3.digitaloceanspaces.com" # region endpoint; must match terraform var.region
+pds_blobstore_s3_region: "us-east-1" # AWS SDK region (DO ignores it; the endpoint encodes the datacenter)
+pds_blobstore_s3_force_path_style: "false" # virtual-hosted style (DO recommendation)
 pds_blobstore_s3_access_key_id: "{{ lookup('env', 'PDS_BLOBSTORE_S3_ACCESS_KEY_ID') }}"
 pds_blobstore_s3_secret_access_key: "{{ lookup('env', 'PDS_BLOBSTORE_S3_SECRET_ACCESS_KEY') }}"