diff --git a/.bazelversion b/.bazelversion
index 47b322c..fcdb2e1 100644
--- a/.bazelversion
+++ b/.bazelversion
@@ -1 +1 @@
-3.4.1
+4.0.0
diff --git a/BUILD b/BUILD
index 608034a..4a7f831 100644
--- a/BUILD
+++ b/BUILD
@@ -22,13 +22,14 @@
 # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 # SUCH DAMAGE.
 
+load("@rules_cc//cc:defs.bzl", "cc_binary", "cc_library")
+load("@rules_pkg//:pkg.bzl", "pkg_deb", "pkg_tar")
+load(":build.bzl", "nginx_copts")
+
 licenses(["notice"])  # BSD license
 
 exports_files(["LICENSE"])
 
-load(":build.bzl", "nginx_copts")
-load("@rules_pkg//:pkg.bzl", "pkg_deb", "pkg_tar")
-
 package(
     default_visibility = [
         "//visibility:public",
diff --git a/build.bzl b/build.bzl
index c331e16..1131579 100644
--- a/build.bzl
+++ b/build.bzl
@@ -330,7 +330,7 @@
     ],
     cmd = "sed -e 's|#DEBHELPER#|" +
           "if [ -x \\"/etc/init.d/nginx\\" ]; then\\\\n" +
-          "\\\\tupdate-rc.d nginx defaults >/dev/null \\|\\| exit $$?\\\\n" +
+          "\\\\tupdate-rc.d nginx defaults >/dev/null \\\\|\\\\| exit $$?\\\\n" +
           "fi\\\\n" +
           "|g'" +
           " < $(<) > $(@)",
@@ -382,7 +382,7 @@
           "fi\\\\n" +
           "\\\\n" +
           "if [ -d /run/systemd/system ] ; then\\\\n" +
-          "\\\\tsystemctl --system daemon-reload >/dev/null \\|\\| true\\\\n" +
+          "\\\\tsystemctl --system daemon-reload >/dev/null \\\\|\\\\| true\\\\n" +
           "fi\\\\n" +
           "|g'" +
           " < $(<) > $(@)",