diff --git a/common.nix b/common.nix
index 3b69014..9b33888 100644
--- a/common.nix
+++ b/common.nix
@@ -620,11 +620,11 @@ isoConfig
            echo "✅ Workshop ISO - NixOS $(nixos-version) - Built: $(cat /etc/workshop-build-info 2>/dev/null || echo 'unknown')"
 
           # Bash Completion Configuration
-           _workshop_completion() {
-             local cur prev
-             COMPREPLY=()
-             cur="${COMP_WORDS[COMP_CWORD]}"
-             prev="${COMP_WORDS[COMP_CWORD-1]}"
+          _workshop_completion() {
+            local cur prev
+            COMPREPLY=()
+            cur="''${COMP_WORDS[COMP_CWORD]}"
+            prev="''${COMP_WORDS[COMP_CWORD-1]}"
           
             case "$prev" in
               deploy|browser)
@@ -863,22 +863,12 @@ isoConfig
                }
              fi
 
-               # Generate certificate following abra guidelines
-               echo "   Generating RSA key and certificate (abra-compatible)..."
-               if openssl req -x509 -out "$CERT_FILE" -keyout "$KEY_FILE" \
-                 -newkey rsa:2048 -nodes -sha256 -days 365 \
-                 -subj "/CN=*.workshop.local" -extensions EXT -config <( \
-                  cat <<EOF
-[dn]
-CN=*.workshop.local
-[req]
-distinguished_name = dn
-[EXT]
-subjectAltName=DNS:*.workshop.local,DNS:workshop.local,DNS:localhost
-keyUsage=digitalSignature
-extendedKeyUsage=serverAuth
-EOF
-                  ); then
+              # Generate certificate following abra guidelines
+              echo "   Generating RSA key and certificate (abra-compatible)..."
+              if openssl req -x509 -out "$CERT_FILE" -keyout "$KEY_FILE" \
+                -newkey rsa:2048 -nodes -sha256 -days 365 \
+                -subj "/CN=*.workshop.local" -extensions EXT -config <( \
+                 printf "[dn]\nCN=*.workshop.local\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:*.workshop.local,DNS:workshop.local,DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth"); then
 
                 echo "✅ Certificate generation completed successfully (abra-compatible)"
               else