diff --git a/templates/config.yml.j2 b/templates/config.yml.j2
index ec885e2..1577ce2 100644
--- a/templates/config.yml.j2
+++ b/templates/config.yml.j2
@@ -9,7 +9,8 @@ pki:
   disconnect_invalid: {{ nebula_pki_disconnect_invalid }}
 {% endif %}
 {% if nebula_pki_blocklist|length >= 1 %}
-  {{ nebula_pki_blocklist | to_nice_yaml(indent=2) | indent(width=2) }}
+  blocklist:
+    {{ nebula_pki_blocklist | to_nice_yaml(indent=2) | indent(width=4) }}
 {% endif %}
 
 # static host map
@@ -41,7 +42,7 @@ lighthouse:
 {% if not nebula_am_lighthouse %}
 {% for host in ansible_play_hosts_all %}
 {% if (hostvars[host]['nebula_am_lighthouse']|default(false)) and (hostvars[host]['nebula_is_member']|default(true)) %}
-    - {{ hostvars[host]['nebula_ip'].split('/')[0] }}
+    - '{{ hostvars[host]['nebula_ip'].split('/')[0] }}'
 {% endif %}
 {% endfor %}
 {% endif %}