diff --git a/module.nix b/module.nix
index a97c3c4..fa64f6e 100644
--- a/module.nix
+++ b/module.nix
@@ -22,8 +22,8 @@ in {
     };
 
     args = lib.mkOption {
-      type = lib.types.separatedString " ";
-      default = "";
+      type = with lib.types; listOf str;
+      default = [];
     };
   };
 
@@ -37,11 +37,11 @@ in {
 
       serviceConfig = {
         LoadCredential = ["matrixoidc-secrets:${cfg.jwtSecretFile}"];
-        ExecStart = utils.escapeSystemdExecArgs [
-          (lib.getExe cfg.package)
-          cfg.args
-          "--jwtSecretFile=/run/credentials/matrixoidc.service/matrixoidc-secrets"
-        ];
+        ExecStart = utils.escapeSystemdExecArgs ([
+            (lib.getExe cfg.package)
+            "--jwtSecretFile=/run/credentials/matrixoidc.service/matrixoidc-secrets"
+          ]
+          ++ cfg.args);
         DynamicUser = true;
         LockPersonality = true;
         MemoryDenyWriteExecute = true;