vidhar: ...

1 files changed, 2 insertions, 0 deletions

diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index 76c4e3ff..0bf1ca58 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -342,6 +342,8 @@ in {
     systemd.services."prometheus-smartctl-exporter" = {
       serviceConfig = {
         DeviceAllow = lib.mkForce config.services.prometheus.exporters.smartctl.devices;
+        CapabilityBoundingSet = lib.mkForce ["CAP_SYS_ADMIN"];
+        AmbientCapabilities = lib.mkForce ["CAP_SYS_ADMIN"];
       };
     };
   };