From c5e4a4da5c8946dd2e255436c4d5f970f48fc351 Mon Sep 17 00:00:00 2001
From: Hunter Haugen <hunter@haugen.email>
Date: Tue, 30 Dec 2025 07:44:25 -0800
Subject: [PATCH] Allow cryo to delete snapshots

---
 hosts/cryochamber/configuration.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/hosts/cryochamber/configuration.nix b/hosts/cryochamber/configuration.nix
index 65be117..60d1124 100644
--- a/hosts/cryochamber/configuration.nix
+++ b/hosts/cryochamber/configuration.nix
@@ -188,6 +188,16 @@
       "--sshoption=UserKnownHostsFile=${config.sops.secrets.zimaKnownHosts.path}"
       "--sshoption=IdentitiesOnly=yes"
     ];
+    localTargetAllow = [
+      "change-key"
+      "compression"
+      "create"
+      "mount"
+      "mountpoint"
+      "receive"
+      "rollback"
+      "delete"
+    ];
     commands."zima-bitrot" = {
       source = "root@zima:bitrot";
       target = "tank/backups/zima/bitrot";