diff --git a/modules/home/shell/zsh.nix b/modules/home/shell/zsh.nix
index 833831e..be92e26 100644
--- a/modules/home/shell/zsh.nix
+++ b/modules/home/shell/zsh.nix
@@ -41,7 +41,9 @@
 
         [[ -d "$secret_dir" ]] || return 0
 
-        for secret_file in "$secret_dir"/*(N.); do
+        # `-.` matches plain files and symlinks to plain files.
+        # sops-nix links each runtime secret into this directory.
+        for secret_file in "$secret_dir"/*(N-.); do
           name="''${secret_file:t}"
           [[ "$name" =~ '^[A-Za-z_][A-Za-z0-9_]*$' ]] || continue
           value="$(<"$secret_file")"