diff --git a/home/ssh.nix b/home/ssh.nix
index 3f80b3b..a5beda4 100644
--- a/home/ssh.nix
+++ b/home/ssh.nix
@@ -49,6 +49,8 @@ in {
           proxyJump = "ssh.lrde.epita.fr";
         };
       };
+
+      includes = [ "prologin_config" ];
     };
   };
 }
diff --git a/hosts/zephyrus/default.nix b/hosts/zephyrus/default.nix
index a498e4a..b267958 100644
--- a/hosts/zephyrus/default.nix
+++ b/hosts/zephyrus/default.nix
@@ -74,6 +74,9 @@
         # test vms
         "*.qcow2"
 
+        # secrets stay offline
+        "/home/alarsyo/**/secrets"
+
         # ignore all dotfiles as .config and .cache can become quite big
         "/home/alarsyo/.*"
       ];