1 files changed, 11 insertions, 5 deletions

diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index 50f9338d..5e33a8d0 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -341,11 +341,17 @@ in {
 
     systemd.services."prometheus-smartctl-exporter" = {
       serviceConfig = {
-        DeviceAllow = lib.mkOverride 200 [
-          "block-blkext rw"
-          "block-sd rw"
-          "char-nvme rw"
-        ];
+        DeviceAllow = lib.mkForce (map (dev: "/dev/disk/by-path/${dev}") [
+          "pci-0000:00:1f.2-ata-1"
+          "pci-0000:00:1f.2-ata-3"
+          "pci-0000:00:1f.2-ata-4"
+          "pci-0000:00:1f.2-ata-5"
+          "pci-0000:00:1f.2-ata-6"
+          "pci-0000:02:00.0-nvme-1"
+          "pci-0000:05:00.0-sas-phy0-lun-0"
+          "pci-0000:05:00.0-sas-phy1-lun-0"
+          "pci-0000:06:00.0-nvme-1"
+        ]);
       };
     };
   };