diff --git a/services/redis.nix b/services/redis.nix
index 690522d..c30e0ef 100644
--- a/services/redis.nix
+++ b/services/redis.nix
@@ -17,11 +17,11 @@ in
 let
 
   generateRedisConfig = ''
-    cat > $RUNTIME_PATH/${name}.conf <<EOF
+    cat > "$RUNTIME_PATH"/${name}.conf <<EOF
     ${lib.optionalString default_config ''
       port ${builtins.toString port}
       ${lib.optionalString (bind != null) "bind ${bind}"}
-      ${lib.optionalString (port == 0) "unixsocket $RUNTIME_PATH/${name}.sock"}
+      ${lib.optionalString (port == 0) "unixsocket \"$RUNTIME_PATH/${name}.sock\""}
       ${lib.optionalString (port == 0) "unixsocketperm 700"}
     ''}
     ${extra_config}
@@ -32,11 +32,11 @@ let
     name = "run-redis";
     text = ''
       set -euo pipefail
-      REDISDATA=$RUNTIME_PATH/${name}/
+      REDISDATA="$RUNTIME_PATH"/${name}/
       ${
         if (port == 0) then
           ''
-            REDIS_UNIX_SOCKET = $RUNTIME_PATH/${name}.sock
+            REDIS_UNIX_SOCKET = "$RUNTIME_PATH"/${name}.sock
             export REDIS_UNIX_SOCKET
             echo "Starting redis on unix socket ''${REDIS_UNIX_SOCKET}"
           ''
@@ -50,11 +50,11 @@ let
         mkdir -p $REDISDATA
       fi
       ${generateRedisConfig}
-      ${package}/bin/redis-server $RUNTIME_PATH/${name}.conf --daemonize no --dir "$REDISDATA"
+      ${package}/bin/redis-server "$RUNTIME_PATH"/${name}.conf --daemonize no --dir "$REDISDATA"
     '';
   };
   tcpPing = "${package}/bin/redis-cli -p ${builtins.toString port} ping";
-  unixPing = "${package}/bin/redis-cli -s $RUNTIME_PATH/${name}.sock ping";
+  unixPing = "${package}/bin/redis-cli -s \"$RUNTIME_PATH\"/${name}.sock ping";
 in
 {
   processes."${name}" = {