diff --git a/lib/fudo/ssh.nix b/lib/fudo/ssh.nix
index ba40724..0ecbc45 100644
--- a/lib/fudo/ssh.nix
+++ b/lib/fudo/ssh.nix
@@ -44,8 +44,8 @@ in {
           host-keypairs);
 
       hosts = mapAttrs (hostname: keypairs: {
-        ssh-pubkeys = concatMap (keypair: keypair.public-key) keypairs;
-        ssh-fingerprints = map (keypair:
+        ssh-pubkeys = map (keypair: keypair.public-key) keypairs;
+        ssh-fingerprints = flatMap (keypair:
           let
             fingerprint-derivation = dns-sshfp-records hostname keypair;
             filename = sshfp-filename hostname keypair;