diff --git a/hosts/hetzner-vm/services/restic.nix b/hosts/hetzner-vm/services/restic.nix
index be4fe7d..c03535d 100644
--- a/hosts/hetzner-vm/services/restic.nix
+++ b/hosts/hetzner-vm/services/restic.nix
@@ -6,11 +6,15 @@ let
     OnBootSec = "1m";
     OnCalendar = "daily";
   };
+  pruneOpts = [
+    "--keep-within 14d"
+  ];
 in {
   services.restic.backups.hetzner-vm = {
     user = backupUser;
     paths = backupPaths;
     timerConfig = timerConfig;
+    pruneOpts = pruneOpts;
     repository = "b2:Backups-HetznerVM:/";
     passwordFile = "/secrets/restic-password";
     environmentFile = "/secrets/restic-env";
@@ -19,6 +23,7 @@ in {
     user = backupUser;
     paths = backupPaths;
     timerConfig = timerConfig;
+    pruneOpts = pruneOpts;
     repository = "b2:Cryptidz-Backup:HetznerVM";
     passwordFile = "/secrets/restic-password-cassie";
     environmentFile = "/secrets/restic-env-cassie";