From 5015af973aba24f85078bbba8167b094cd2ea0db Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Sat, 12 Feb 2022 20:47:27 +0100
Subject: vidhar: ...

---
 hosts/vidhar/prometheus/default.nix | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'hosts/vidhar/prometheus/default.nix')

diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index 76c4e3ff..0bf1ca58 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -342,6 +342,8 @@ in {
     systemd.services."prometheus-smartctl-exporter" = {
       serviceConfig = {
         DeviceAllow = lib.mkForce config.services.prometheus.exporters.smartctl.devices;
+        CapabilityBoundingSet = lib.mkForce ["CAP_SYS_ADMIN"];
+        AmbientCapabilities = lib.mkForce ["CAP_SYS_ADMIN"];
       };
     };
   };
-- 
cgit v1.2.3