summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2022-02-12 20:47:27 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2022-02-12 20:47:27 +0100
commit5015af973aba24f85078bbba8167b094cd2ea0db (patch)
tree7113d2cc00471dc2db2eace5199426a207fab3ab
parent4e319a99515f203b7795a5a93174b18aebe82e8e (diff)
downloadnixos-5015af973aba24f85078bbba8167b094cd2ea0db.tar
nixos-5015af973aba24f85078bbba8167b094cd2ea0db.tar.gz
nixos-5015af973aba24f85078bbba8167b094cd2ea0db.tar.bz2
nixos-5015af973aba24f85078bbba8167b094cd2ea0db.tar.xz
nixos-5015af973aba24f85078bbba8167b094cd2ea0db.zip
vidhar: ...
-rw-r--r--hosts/vidhar/prometheus/default.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index 76c4e3ff..0bf1ca58 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -342,6 +342,8 @@ in {
342 systemd.services."prometheus-smartctl-exporter" = { 342 systemd.services."prometheus-smartctl-exporter" = {
343 serviceConfig = { 343 serviceConfig = {
344 DeviceAllow = lib.mkForce config.services.prometheus.exporters.smartctl.devices; 344 DeviceAllow = lib.mkForce config.services.prometheus.exporters.smartctl.devices;
345 CapabilityBoundingSet = lib.mkForce ["CAP_SYS_ADMIN"];
346 AmbientCapabilities = lib.mkForce ["CAP_SYS_ADMIN"];
345 }; 347 };
346 }; 348 };
347 }; 349 };