From 277fa259c19836f94e9371bb0873f61673661908 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Thu, 29 Dec 2022 21:01:33 +0100
Subject: ...

---
 hosts/vidhar/prometheus/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index b188f7e6..c0d41743 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -401,6 +401,7 @@ in {
         ] ++ cfg.extraFlags)}";
         ReadWritePaths = ["/run/dbus/system_bus_socket"];
         BindReadOnlyPaths = ["/proc" "/sys"];
+        AmbientCapabilities = ["CAP_DAC_OVERRIDE"];
       };
     };
 
-- 
cgit v1.2.3