diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-12-29 21:10:22 +0100 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-12-29 21:10:22 +0100 |
commit | ae1ba4dbe3c1395484f8f01f522630a333630332 (patch) | |
tree | 303e0b1db0dcfa7e7695092c878e63df45b6cd43 | |
parent | 6d6e19a04921afd504e844a3ec7a24b1e296f4fb (diff) | |
download | nixos-ae1ba4dbe3c1395484f8f01f522630a333630332.tar nixos-ae1ba4dbe3c1395484f8f01f522630a333630332.tar.gz nixos-ae1ba4dbe3c1395484f8f01f522630a333630332.tar.bz2 nixos-ae1ba4dbe3c1395484f8f01f522630a333630332.tar.xz nixos-ae1ba4dbe3c1395484f8f01f522630a333630332.zip |
...
-rw-r--r-- | hosts/vidhar/prometheus/default.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix index c0d41743..6bfa0b49 100644 --- a/hosts/vidhar/prometheus/default.nix +++ b/hosts/vidhar/prometheus/default.nix | |||
@@ -401,6 +401,7 @@ in { | |||
401 | ] ++ cfg.extraFlags)}"; | 401 | ] ++ cfg.extraFlags)}"; |
402 | ReadWritePaths = ["/run/dbus/system_bus_socket"]; | 402 | ReadWritePaths = ["/run/dbus/system_bus_socket"]; |
403 | BindReadOnlyPaths = ["/proc" "/sys"]; | 403 | BindReadOnlyPaths = ["/proc" "/sys"]; |
404 | CapabilityBoundingSet = ["CAP_DAC_OVERRIDE"]; | ||
404 | AmbientCapabilities = ["CAP_DAC_OVERRIDE"]; | 405 | AmbientCapabilities = ["CAP_DAC_OVERRIDE"]; |
405 | }; | 406 | }; |
406 | }; | 407 | }; |