From a13b3508981258145a9a7b516225e66f20d82473 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 8 Nov 2022 09:26:50 +0100
Subject: ...

---
 hosts/vidhar/prometheus/default.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'hosts/vidhar/prometheus/default.nix')

diff --git a/hosts/vidhar/prometheus/default.nix b/hosts/vidhar/prometheus/default.nix
index 8e5ff0ea..de7837dc 100644
--- a/hosts/vidhar/prometheus/default.nix
+++ b/hosts/vidhar/prometheus/default.nix
@@ -398,6 +398,14 @@ in {
       '';
     };
 
+    systemd.services.prometheus = {
+      serviceConfig = {
+        SystemCallFilter = [
+          "@resources"
+        ];
+      };
+    };
+
     services.nginx = {
       upstreams.prometheus = {
         servers = { "localhost:${toString config.services.prometheus.port}" = {}; };
-- 
cgit v1.2.3