diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-12 20:47:27 +0100 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-02-12 20:47:27 +0100 |
commit | 5015af973aba24f85078bbba8167b094cd2ea0db (patch) | |
tree | 7113d2cc00471dc2db2eace5199426a207fab3ab | |
parent | 4e319a99515f203b7795a5a93174b18aebe82e8e (diff) | |
download | nixos-5015af973aba24f85078bbba8167b094cd2ea0db.tar nixos-5015af973aba24f85078bbba8167b094cd2ea0db.tar.gz nixos-5015af973aba24f85078bbba8167b094cd2ea0db.tar.bz2 nixos-5015af973aba24f85078bbba8167b094cd2ea0db.tar.xz nixos-5015af973aba24f85078bbba8167b094cd2ea0db.zip |
vidhar: ...
-rw-r--r-- | hosts/vidhar/prometheus/default.nix | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix index 76c4e3ff..0bf1ca58 100644 --- a/hosts/vidhar/prometheus/default.nix +++ b/hosts/vidhar/prometheus/default.nix | |||
@@ -342,6 +342,8 @@ in { | |||
342 | systemd.services."prometheus-smartctl-exporter" = { | 342 | systemd.services."prometheus-smartctl-exporter" = { |
343 | serviceConfig = { | 343 | serviceConfig = { |
344 | DeviceAllow = lib.mkForce config.services.prometheus.exporters.smartctl.devices; | 344 | DeviceAllow = lib.mkForce config.services.prometheus.exporters.smartctl.devices; |
345 | CapabilityBoundingSet = lib.mkForce ["CAP_SYS_ADMIN"]; | ||
346 | AmbientCapabilities = lib.mkForce ["CAP_SYS_ADMIN"]; | ||
345 | }; | 347 | }; |
346 | }; | 348 | }; |
347 | }; | 349 | }; |