diff --git a/internal/firewall/firewall.go b/internal/firewall/firewall.go
index fbf98be..8851659 100644
--- a/internal/firewall/firewall.go
+++ b/internal/firewall/firewall.go
@@ -477,12 +477,12 @@ func words(rule string) []string {
 // operator's rule now carries the mesh's mark — so removing the opening later would delete the
 // operator's rule. The same holds for an incoming rule and for one with a comment of its own.
 type ufwRule struct {
-	route              bool
-	action, in, out    string
+	route           bool
+	action, in, out string
 	// dir is which way the rule matches: "" (ufw's default, incoming and forwarded), "in" or
 	// "out". A rule on the outgoing path admits nothing that arrives.
-	dir string
-	log string
+	dir                string
+	log                string
 	from, fromPort, to string
 	port, proto, app   string
 	comment            string