diff --git a/docs/ref/acls.md b/docs/ref/acls.md
index d2ea9596f61..a621da5dd9d 100644
--- a/docs/ref/acls.md
+++ b/docs/ref/acls.md
@@ -87,7 +87,7 @@ Here are the ACL's to implement the same permissions as above:
   // to define a single host, use a /32 mask. You cannot use DNS entries here,
   // as they're prone to be hijacked by replacing their IP addresses.
   // see https://github.com/tailscale/tailscale/issues/3800 for more information.
-  "Hosts": {
+  "hosts": {
     "postgresql.internal": "10.20.0.2/32",
     "webservers.internal": "10.20.10.1/29"
   },