diff --git a/nixos/modules/security/dhparams.nix b/nixos/modules/security/dhparams.nix
index 738062c95c47..c501ea70d05c 100644
--- a/nixos/modules/security/dhparams.nix
+++ b/nixos/modules/security/dhparams.nix
@@ -157,7 +157,7 @@ in {
                 continue
               fi
             '') cfg.params)}
-            rm $file
+            rm "$file"
           done
 
           # TODO: Ideally this would be removing the *former* cfg.path, though