diff --git a/nixos/modules/config/krb5/default.nix b/nixos/modules/config/krb5/default.nix
index 85ecb8633a34..58477fafc2d7 100644
--- a/nixos/modules/config/krb5/default.nix
+++ b/nixos/modules/config/krb5/default.nix
@@ -43,14 +43,15 @@ let
 
   indent = "  ";
 
-  mkRelation = name: value: "${name} = ${mkVal value}";
+  mkRelation = name: value:
+    if (isList value) then
+      concatMapStringsSep "\n" (mkRelation name) value
+    else "${name} = ${mkVal value}";
 
   mkVal = value:
     if (value == true) then "true"
     else if (value == false) then "false"
     else if (isInt value) then (toString value)
-    else if (isList value) then
-      concatMapStringsSep " " mkVal value
     else if (isAttrs value) then
       let configLines = concatLists
         (map (splitString "\n")