diff --git a/enroll-diff.md b/enroll-diff.md
index 867f298..87f0138 100644
--- a/enroll-diff.md
+++ b/enroll-diff.md
@@ -15,7 +15,7 @@ The `diff` command can also understand SOPS-encrypted harvests, assume the user
 
 Assuming you have two harvests on your filesystem:
 
-```
+```bash
 enroll diff \
   --old harvest.v1 \
   --new harvest.v2 
@@ -37,7 +37,7 @@ You can use this to script any further action your cron service might take, such
 
 You can also send the output to a webhook under your control. Here is an example:
 
-```
+```bash
 enroll diff \
   --old harvest.v1 \
   --new harvest.v2 \
@@ -66,7 +66,7 @@ You can optionally promote the new harvest to become the new 'golden' harvest fo
 
 Store in `/usr/local/bin/enroll-harvest-diff.sh` and make it `chmod 0700`
 
-```
+```bash
 #!/usr/bin/env bash
 set -euo pipefail
 
@@ -174,7 +174,7 @@ ENROLL_SECRET=xxxxxxxxxxxxxxxxxxxx
 
 `/etc/systemd/system/enroll-harvest-diff.service`:
 
-```
+```ini
 [Unit]
 Description=Enroll harvest + diff + webhook notify
 Wants=network-online.target
@@ -197,7 +197,7 @@ ExecStart=/usr/local/bin/enroll-harvest-diff.sh
 
 `/etc/systemd/system/enroll-harvest-diff.timer`
 
-```
+```ini
 [Unit]
 Description=Run Enroll harvest diff hourly
 
@@ -212,7 +212,7 @@ WantedBy=timers.target
 
 ## Enable + test
 
-```
+```bash
 sudo systemctl daemon-reload
 sudo systemctl enable --now enroll-harvest-diff.timer