diff --git a/modules/journalwatch.nix b/modules/journalwatch.nix
index 1e357a8..1b197c8 100644
--- a/modules/journalwatch.nix
+++ b/modules/journalwatch.nix
@@ -118,22 +118,22 @@
         filters = ''
           \S+ \S+ \[error\] [0-9]+#[0-9]+: \S+ open\(\) "/usr/share/nginx/html/robots\.txt" failed \(2: No such file or directory\), client: \S+, server: localhost, request: "GET /robots\.txt HTTP/[^"]+", host: "[^"]+"
           #
-          S+ S+ \[notice\] [0-9]+#[0-9]+: signal 3 \(SIGQUIT\) received, shutting down
-          S+ S+ \[notice\] [0-9]+#[0-9]+: gracefully shutting down
-          S+ S+ \[notice\] [0-9]+#[0-9]+: exiting
-          S+ S+ \[notice\] [0-9]+#[0-9]+: exit
-          S+ S+ \[notice\] [0-9]+#[0-9]+: signal 17 \(SIGCHLD\) received from [0-9]+
-          S+ S+ \[notice\] [0-9]+#[0-9]+: worker process [0-9]+ exited with code 0
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: signal 3 \(SIGQUIT\) received, shutting down
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: gracefully shutting down
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: exiting
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: exit
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: signal 17 \(SIGCHLD\) received from [0-9]+
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: worker process [0-9]+ exited with code 0
           #
-          S+ S+ \[notice\] [0-9]+#[0-9]+: reconfiguring
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: reconfiguring
           #
-          S+ S+ \[notice\] [0-9]+#[0-9]+: using the "epoll" event method
-          S+ S+ \[notice\] [0-9]+#[0-9]+: nginx/\S+
-          S+ S+ \[notice\] [0-9]+#[0-9]+: built by gcc \S+ \S+ (Alpine \S+)
-          S+ S+ \[notice\] [0-9]+#[0-9]+: OS: Linux \S+
-          S+ S+ \[notice\] [0-9]+#[0-9]+: getrlimit\(RLIMIT_NOFILE\): [0-9]+:[0-9]+
-          S+ S+ \[notice\] [0-9]+#[0-9]+: start worker processes
-          S+ S+ \[notice\] [0-9]+#[0-9]+: start worker process [0-9]+
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: using the "epoll" event method
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: nginx/\S+
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: built by gcc \S+ \S+ (Alpine \S+)
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: OS: Linux \S+
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: getrlimit\(RLIMIT_NOFILE\): [0-9]+:[0-9]+
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: start worker processes
+         \S+\S+ \[notice\] [0-9]+#[0-9]+: start worker process [0-9]+
 
         '';
         match = "IMAGE_NAME = /nginx:\S+/";
@@ -179,11 +179,11 @@
       }
       { # yodaNas
         filters = ''
-          \S+ S+ UTC \[[0-9]\] LOG:  received fast shutdown request
-          \S+ S+ UTC \[[0-9]\] LOG:  aborting any active transactions
-          \S+ S+ UTC \[[0-9]\] FATAL:  terminating connection due to administrator command
-          \S+ S+ UTC \[[0-9]\] LOG:  shutting down
-          \S+ S+ UTC \[[0-9]\] LOG:  database system is shut down
+          \S+\S+ UTC \[[0-9]\] LOG:  received fast shutdown request
+          \S+\S+ UTC \[[0-9]\] LOG:  aborting any active transactions
+          \S+\S+ UTC \[[0-9]\] FATAL:  terminating connection due to administrator command
+          \S+\S+ UTC \[[0-9]\] LOG:  shutting down
+          \S+\S+ UTC \[[0-9]\] LOG:  database system is shut down
         '';
         match = "IMAGE_NAME = postgres:11-alpine";
       }