...

1 files changed, 8 insertions, 5 deletions

diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index ea185788..13eec1b1 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -1,4 +1,4 @@
-{ config, lib, pkgs, ... }:
+{ config, lib, pkgs, utils, ... }:
 
 with lib;
 
@@ -395,10 +395,13 @@ in {
     systemd.services."prometheus-systemd-exporter" = let
       cfg = config.services.prometheus.exporters.systemd;
     in {
-      serviceConfig.ExecStart = mkForce  ''
-        ${pkgs.prometheus-systemd-exporter}/bin/systemd_exporter \
-          --web.listen-address ${cfg.listenAddress}:${toString cfg.port} ${concatStringsSep " " cfg.extraFlags}
-      '';
+      serviceConfig = {
+        ExecStart = mkForce "${pkgs.prometheus-systemd-exporter}/bin/systemd_exporter ${utils.escapeSystemdExecArgs [
+            "--web.listen-address" "${cfg.listenAddress}:${toString cfg.port}"
+          ] ++ cfg.extraFlags}";
+        ReadWritePaths = ["/run/dbus/system_bus_socket"];
+        BindReadOnlyPaths = ["/proc"];
+      };
     };
 
     services.nginx = {