diff --git a/README.md b/README.md
index 958fb74..48df4c8 100644
--- a/README.md
+++ b/README.md
@@ -55,7 +55,9 @@ services:
     volumes:
       - /srv/data/minio/certs:/root/.minio/certs
       - /srv/services/gencert/gencert.sh:/gencert.sh:ro
-    entrypoint: sh -c "cd /root/.minio/certs && /gencert.sh --cn minio.example.com && minio server /data"
+    entrypoint: sh -c "cd /root/.minio/certs &&
+                       /gencert.sh --cn minio.example.com &&
+                       minio server /data"
     environment:
       - "MINIO_ACCESS_KEY=redacted"
       - "MINIO_SECRET_KEY=redacted"
@@ -65,7 +67,9 @@ services:
     volumes:
       - /srv/services/gencert/gencert.sh:/gencert.sh:ro
       - /srv/data/registry/certs:/certs
-    entrypoint: sh -c "cd /certs && /gencert.sh --cn registry.example.com && registry serve /etc/docker/registry/config.yml"
+    entrypoint: sh -c "cd /certs &&
+                       /gencert.sh --cn registry.example.com &&
+                       registry serve /etc/docker/registry/config.yml"
     environment:
       REGISTRY_HTTP_TLS_CERTIFICATE: '/certs/public.crt'
       REGISTRY_HTTP_TLS_KEY: '/certs/private.key'
@@ -93,7 +97,14 @@ services:
     image: dockercloud/hello-world
     volumes:
       - /srv/services/gencert/gencert.sh:/gencert.sh:ro
-    entrypoint: sh -c "mkdir /certs && cd /certs && /gencert.sh --cn helloworld && apk --update add socat && ( nohup /run.sh & ) && echo '@edge http://nl.alpinelinux.org/alpine/edge/main' | tee -a /etc/apk/repositories && apk --update add socat@edge && socat -v -v -d -d OPENSSL-LISTEN:443,reuseaddr,verify=0,cafile=./ca.crt,cert=./public.crt,key=./private.key,fork tcp4-connect:127.0.0.1:80"
+    entrypoint: sh -c "mkdir /certs &&
+                       cd /certs &&
+                       /gencert.sh --cn helloworld &&
+                       apk --update add socat &&
+                       ( nohup /run.sh & ) &&
+                       echo '@edge http://nl.alpinelinux.org/alpine/edge/main' | tee -a /etc/apk/repositories &&
+                       apk --update add socat@edge &&
+                       socat -v -v -d -d OPENSSL-LISTEN:443,reuseaddr,verify=0,cafile=./ca.crt,cert=./public.crt,key=./private.key,fork TCP4-CONNECT:127.0.0.1:80"
     labels:
       traefik.enable: 'true'
       traefik.frontend.rule: 'Host: hello.example.com'