diff --git a/nixos/hosts/phantom-ship.nix b/nixos/hosts/phantom-ship.nix
index 3137532..427b5c1 100644
--- a/nixos/hosts/phantom-ship.nix
+++ b/nixos/hosts/phantom-ship.nix
@@ -124,7 +124,9 @@ in
       WorkingDirectory = "/home/danny";
       EnvironmentFile = "/etc/claude-channels/env";
       # claude needs a PTY; wrap with script(1). /dev/null discards the typescript.
-      ExecStart = ''${pkgs.util-linux}/bin/script -qfc "${pkgs.claude-code}/bin/claude --channels plugin:telegram@claude-plugins-official" /dev/null'';
+      # --dangerously-skip-permissions: unattended use. Safe here because the bot
+      # is paired only to danny's Telegram ID (allowFrom) on a private server.
+      ExecStart = ''${pkgs.util-linux}/bin/script -qfc "${pkgs.claude-code}/bin/claude --channels plugin:telegram@claude-plugins-official --dangerously-skip-permissions" /dev/null'';
       Restart = "always";
       RestartSec = 5;
     };