diff --git a/nixos/modules/programs/bat.nix b/nixos/modules/programs/bat.nix
index cbe6ac48e909..3ebc0424a3fd 100644
--- a/nixos/modules/programs/bat.nix
+++ b/nixos/modules/programs/bat.nix
@@ -8,6 +8,7 @@ let
   inherit (builtins) isList;
   inherit (lib)
     concatMapStrings
+    escapeShellArg
     literalExpression
     maintainers
     mapAttrs'
@@ -34,7 +35,7 @@ let
     else if isBool value then
       boolToString value
     else
-      toString value;
+      escapeShellArg (toString value);
 in
 {
   options.programs.bat = {