diff --git a/hosts/manatee/modules/restic/default.nix b/hosts/manatee/modules/restic/default.nix
index ae5fd84..f3a2cf9 100644
--- a/hosts/manatee/modules/restic/default.nix
+++ b/hosts/manatee/modules/restic/default.nix
@@ -51,11 +51,14 @@ let
         --exclude='__pycache__/' \
         "$@" \
         "$src/" "$dst/"
+      # find -H: with DynamicUser, /var/lib/<name> is a symlink into
+      # /var/lib/private, and plain find stops at the link and finds no
+      # databases (rsync follows "$src/", but excludes them on purpose).
       while IFS= read -r db; do
         local rel="''${db#"$src"/}"
         install -d -m700 "$dst/$(dirname "$rel")"
         sqlite3 "$db" ".backup '$dst/$rel'"
-      done < <(find "$src" -maxdepth 4 -type f \( -name '*.sqlite' -o -name '*.db' \))
+      done < <(find -H "$src" -maxdepth 4 -type f \( -name '*.sqlite' -o -name '*.db' \))
     }
 
     # --- romm: logical MariaDB dump + user assets (saves/states/screenshots) ---