diff --git a/flake.nix b/flake.nix
index 15b5066..c628ff2 100644
--- a/flake.nix
+++ b/flake.nix
@@ -133,6 +133,10 @@
             shfmt.enable = true;
             yamlfmt.enable = true;
           };
+
+          settings.formatter = {
+            nixpkgs-fmt.excludes = [ "secret/**/*.nix" ];
+          };
         };
 
         devShells.default = pkgs.mkShell {