diff --git a/modules/wafrn.nix b/modules/wafrn.nix
index bdfe939..3dcc75d 100644
--- a/modules/wafrn.nix
+++ b/modules/wafrn.nix
@@ -198,7 +198,7 @@ let
           redis = { condition = "service_started"; };
           frontend = { condition = "service_started"; };
         };
-        command = "npm exec tsx migrate.ts init-container";
+        command = [ "npm" "exec" "tsx" "migrate.ts" "init-container" ];
       };
 
       frontend = serviceCommon // frontendContainerSpec // {
@@ -239,7 +239,7 @@ let
     }
     // optionalAttrs cfg.bluesky.enable {
       pds_worker = serviceCommon // backendContainerSpec // {
-        command = "npm exec tsx atproto.ts";
+        command = [ "npm" "exec" "tsx" "atproto.ts" ];
         depends_on = {
           db = { condition = "service_started"; };
           redis = { condition = "service_started"; };