diff --git a/hosts/e132105/home.nix b/hosts/e132105/home.nix
index 0650c2b..b47d9bb 100644
--- a/hosts/e132105/home.nix
+++ b/hosts/e132105/home.nix
@@ -25,6 +25,12 @@
     };
   };
 
+  # Zen's Nix build does not discover Ubuntu's p11-kit trust anchors, so import
+  # the ARM root directly into its NSS certificate database.
+  programs.zen-browser.policies.Certificates.Install = [
+    "/usr/local/share/ca-certificates/ARM-Enterprise-PKI-Root-CA.crt"
+  ];
+
   # Zen is wrapped with Nix libraries, which are incompatible with Ubuntu's
   # Slack build when inherited by the slack:// protocol handler.
   xdg.dataFile."applications/slack.desktop" = {
diff --git a/modules/home/ghostty/default.nix b/modules/home/ghostty/default.nix
index f61d3a2..55ae3a1 100644
--- a/modules/home/ghostty/default.nix
+++ b/modules/home/ghostty/default.nix
@@ -21,6 +21,7 @@
     enableZshIntegration = true;
 
     settings = {
+      command = "${config.programs.zsh.package}/bin/zsh --login";
       theme = "Catppuccin Mocha";
       font-size = 9;
       window-padding-x = 8;
diff --git a/modules/home/shell/default.nix b/modules/home/shell/default.nix
index e3d1ef4..c0b4c74 100644
--- a/modules/home/shell/default.nix
+++ b/modules/home/shell/default.nix
@@ -7,6 +7,11 @@
         source "$HOME/.nix-profile/etc/profile.d/nix.sh"
       fi
     '';
+    profileExtra = ''
+      if [[ -r "$HOME/.profile" ]]; then
+        source "$HOME/.profile"
+      fi
+    '';
     autocd = true;
     autosuggestion.enable = true;
     enableCompletion = true;