diff --git a/paperless/docker-compose.env.jinja b/paperless/docker-compose.env.jinja
index adc6dc7..7cc3a7f 100644
--- a/paperless/docker-compose.env.jinja
+++ b/paperless/docker-compose.env.jinja
@@ -9,7 +9,7 @@ PAPERLESS_TIKA_GOTENBERG_ENDPOINT={{ salt['pillar.get']('paperless:webserver:env
 PAPERLESS_APPS=allauth.socialaccount.providers.openid_connect
 PAPERLESS_CLIENT_SECRET={{ salt['pillar.get']('paperless:webserver:keycloak:client_secret', '<CLIENT_SECRET>') }}
 PAPERLESS_SERVER_URL={{ salt['pillar.get']('paperless:webserver:keycloak:server_url', 'https://<KEYCLOAK_SERVER>/realms/<REALM>/.well-known/openid-configuration') }}
-PAPERLESS_SOCIALACCOUNT_PROVIDERS="{'openid_connect':{'APPS':[{'provider_id': 'keycloak', 'name': 'Keycloak', 'client_id': 'paperless', 'secret': '${PAPERLESS_CLIENT_SECRET}', 'settings':{'server_url': '${PAPERLESS_SERVER_URL}'}}]}}"
+PAPERLESS_SOCIALACCOUNT_PROVIDERS="{\"openid_connect\":{\"APPS\":[{\"provider_id\": \"keycloak\", \"name\": \"Keycloak\", \"client_id\": \"paperless\", \"secret\": \"${PAPERLESS_CLIENT_SECRET}\", \"settings\":{\"server_url\": \"${PAPERLESS_SERVER_URL}\"}}]}}"
 
 PAPERLESS_DISABLE_REGULAR_LOGIN={{ salt['pillar.get']('paperless:webserver:environment:disable_regular_login', 'true') }}
 PAPERLESS_REDIRECT_LOGIN_TO_SSO={{ salt['pillar.get']('paperless:webserver:environment:redirect_login_to_sso', 'true') }}