diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 04c3e8c..3ab5046 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -32,3 +32,11 @@ repos:
           - "--wrap=90"
         types:
           - markdown
+
+      - id: terraform
+        name: terraform format
+        entry: terraform
+        language: system
+        args:
+          - fmt
+        files: ".*\\.tf$"
diff --git a/terra/domain.enp.tf b/terra/domain.enp.tf
index 19bd4fd..74af637 100644
--- a/terra/domain.enp.tf
+++ b/terra/domain.enp.tf
@@ -160,41 +160,41 @@ resource "digitalocean_record" "enp_mx" {
 }
 
 resource "digitalocean_record" "enp_spf" {
-  domain   = digitalocean_domain.enp.id
-  type     = "TXT"
-  name     = "@"
-  value    = "v=spf1 include:spf.tutanota.de -all"
-  ttl      = 3600
+  domain = digitalocean_domain.enp.id
+  type   = "TXT"
+  name   = "@"
+  value  = "v=spf1 include:spf.tutanota.de -all"
+  ttl    = 3600
 }
 
 resource "digitalocean_record" "enp_domainkey1" {
-  domain   = digitalocean_domain.enp.id
-  type     = "CNAME"
-  name     = "s1._domainkey"
-  value    = "s1._domainkey.tutanota.de."
-  ttl      = 10600
+  domain = digitalocean_domain.enp.id
+  type   = "CNAME"
+  name   = "s1._domainkey"
+  value  = "s1._domainkey.tutanota.de."
+  ttl    = 10600
 }
 
 resource "digitalocean_record" "enp_domainkey2" {
-  domain   = digitalocean_domain.enp.id
-  type     = "CNAME"
-  name     = "s2._domainkey"
-  value    = "s2._domainkey.tutanota.de."
-  ttl      = 10600
+  domain = digitalocean_domain.enp.id
+  type   = "CNAME"
+  name   = "s2._domainkey"
+  value  = "s2._domainkey.tutanota.de."
+  ttl    = 10600
 }
 
 resource "digitalocean_record" "enp_mta1" {
-  domain   = digitalocean_domain.enp.id
-  type     = "CNAME"
-  name     = "_mta-sts"
-  value    = "_mta-sts.tutanota.com."
-  ttl      = 10600
+  domain = digitalocean_domain.enp.id
+  type   = "CNAME"
+  name   = "_mta-sts"
+  value  = "_mta-sts.tutanota.com."
+  ttl    = 10600
 }
 
 resource "digitalocean_record" "enp_mta2" {
-  domain   = digitalocean_domain.enp.id
-  type     = "CNAME"
-  name     = "mta-sts"
-  value    = "mta-sts.tutanota.com."
-  ttl      = 10600
+  domain = digitalocean_domain.enp.id
+  type   = "CNAME"
+  name   = "mta-sts"
+  value  = "mta-sts.tutanota.com."
+  ttl    = 10600
 }
diff --git a/terra/domain.enpaul.tf b/terra/domain.enpaul.tf
index 1d88fd9..0984a1a 100644
--- a/terra/domain.enpaul.tf
+++ b/terra/domain.enpaul.tf
@@ -83,41 +83,41 @@ resource "digitalocean_record" "enpaul_mx" {
 }
 
 resource "digitalocean_record" "enpaul_spf" {
-  domain   = digitalocean_domain.enpaul.id
-  type     = "TXT"
-  name     = "@"
-  value    = "v=spf1 include:spf.tutanota.de -all"
-  ttl      = 3600
+  domain = digitalocean_domain.enpaul.id
+  type   = "TXT"
+  name   = "@"
+  value  = "v=spf1 include:spf.tutanota.de -all"
+  ttl    = 3600
 }
 
 resource "digitalocean_record" "enpaul_domainkey1" {
-  domain   = digitalocean_domain.enpaul.id
-  type     = "CNAME"
-  name     = "s1._domainkey"
-  value    = "s1._domainkey.tutanota.de."
-  ttl      = 10600
+  domain = digitalocean_domain.enpaul.id
+  type   = "CNAME"
+  name   = "s1._domainkey"
+  value  = "s1._domainkey.tutanota.de."
+  ttl    = 10600
 }
 
 resource "digitalocean_record" "enpaul_domainkey2" {
-  domain   = digitalocean_domain.enpaul.id
-  type     = "CNAME"
-  name     = "s2._domainkey"
-  value    = "s2._domainkey.tutanota.de."
-  ttl      = 10600
+  domain = digitalocean_domain.enpaul.id
+  type   = "CNAME"
+  name   = "s2._domainkey"
+  value  = "s2._domainkey.tutanota.de."
+  ttl    = 10600
 }
 
 resource "digitalocean_record" "enpaul_mta1" {
-  domain   = digitalocean_domain.enpaul.id
-  type     = "CNAME"
-  name     = "_mta-sts"
-  value    = "_mta-sts.tutanota.com."
-  ttl      = 10600
+  domain = digitalocean_domain.enpaul.id
+  type   = "CNAME"
+  name   = "_mta-sts"
+  value  = "_mta-sts.tutanota.com."
+  ttl    = 10600
 }
 
 resource "digitalocean_record" "enpaul_mta2" {
-  domain   = digitalocean_domain.enpaul.id
-  type     = "CNAME"
-  name     = "mta-sts"
-  value    = "mta-sts.tutanota.com."
-  ttl      = 10600
+  domain = digitalocean_domain.enpaul.id
+  type   = "CNAME"
+  name   = "mta-sts"
+  value  = "mta-sts.tutanota.com."
+  ttl    = 10600
 }