Allow cryo to delete snapshots

2025-12-30 07:44:25 -08:00 · 2025-12-30 07:44:25 -08:00 · c5e4a4da5c
commit c5e4a4da5c
parent b397d152d0
1 changed files with 10 additions and 0 deletions
--- a/hosts/cryochamber/configuration.nix
+++ b/hosts/cryochamber/configuration.nix
@ -188,6 +188,16 @@
      "--sshoption=UserKnownHostsFile=${config.sops.secrets.zimaKnownHosts.path}"
      "--sshoption=IdentitiesOnly=yes"
    ];
+    localTargetAllow = [
+      "change-key"
+      "compression"
+      "create"
+      "mount"
+      "mountpoint"
+      "receive"
+      "rollback"
+      "delete"
+    ];
    commands."zima-bitrot" = {
      source = "root@zima:bitrot";
      target = "tank/backups/zima/bitrot";