diff --git a/hosts/zephyrus/default.nix b/hosts/zephyrus/default.nix
index a498e4a..b267958 100644
--- a/hosts/zephyrus/default.nix
+++ b/hosts/zephyrus/default.nix
@@ -74,6 +74,9 @@
         # test vms
         "*.qcow2"
 
+        # secrets stay offline
+        "/home/alarsyo/**/secrets"
+
         # ignore all dotfiles as .config and .cache can become quite big
         "/home/alarsyo/.*"
       ];