1 files changed, 1 insertions, 0 deletions

diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index c0d41743..6bfa0b49 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -401,6 +401,7 @@ in {
         ] ++ cfg.extraFlags)}";
         ReadWritePaths = ["/run/dbus/system_bus_socket"];
         BindReadOnlyPaths = ["/proc" "/sys"];
+        CapabilityBoundingSet = ["CAP_DAC_OVERRIDE"];
         AmbientCapabilities = ["CAP_DAC_OVERRIDE"];
       };
     };