diff --git a/Makefile b/Makefile
index d9d6a1fa..e8f3f612 100644
--- a/Makefile
+++ b/Makefile
@@ -44,7 +44,7 @@ $(NIXOS_PREFIX)/configuration.nix:
 	@echo "import $(PWD)/dotfiles \"$$(hostname)\"" | sudo tee "$(NIXOS_PREFIX)/configuration.nix"
 
 secrets.nix: secrets.nix.gpg
-	gpg -dq $< > $@
+	@nix-shell -p gnupg --run "gpg -dq $< > $@"
 
 
 # Convenience aliases