diff --git a/hosts/idols-ai/restic.nix b/hosts/idols-ai/restic.nix
index 8def7767..47cc6dcd 100644
--- a/hosts/idols-ai/restic.nix
+++ b/hosts/idols-ai/restic.nix
@@ -28,6 +28,9 @@
       "/home/ryan/src"
       "/home/ryan/nix-config"
       "/home/ryan/.local/state"
+      # dsh (DeepSeek Harness) state: session transcripts, workspace storages,
+      # profiles. Its credentials file is excluded below.
+      "/home/ryan/.dsh"
     ];
 
     # anything bigger than this is a re-downloadable artifact (models, datasets,
@@ -79,6 +82,8 @@
       "**/.cache"
       # git object packs: re-fetchable from the remotes
       "**/.git/objects/pack"
+      # dsh login credentials, same rule as the module's built-in credential excludes
+      "**/.dsh/.credentials.yaml"
     ];
   };
 }