summary refs log tree commit diff
path: root/nixos/modules/services/monitoring/prometheus/exporters/systemd.nix
diff options
context:
space:
mode:
authorAlexandre Iooss <erdnaxe@crans.org>2021-08-08 16:48:49 +0200
committerAlexandre Iooss <erdnaxe@crans.org>2021-10-07 10:19:55 +0200
commit9fea6d4c8551b7c8783f23e011a2ba113c95d0dd (patch)
tree72ab5177823179feee672b615385f6cf72488beb /nixos/modules/services/monitoring/prometheus/exporters/systemd.nix
parent9544c029c082a7e545ec75c101f0202f18eb3874 (diff)
downloadnixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar
nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar.gz
nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar.bz2
nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar.lz
nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar.xz
nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.tar.zst
nixpkgs-9fea6d4c8551b7c8783f23e011a2ba113c95d0dd.zip
nixos/prometheus: systemd unit hardening of exporters
Diffstat (limited to 'nixos/modules/services/monitoring/prometheus/exporters/systemd.nix')
-rw-r--r--nixos/modules/services/monitoring/prometheus/exporters/systemd.nix4
1 files changed, 4 insertions, 0 deletions
diff --git a/nixos/modules/services/monitoring/prometheus/exporters/systemd.nix b/nixos/modules/services/monitoring/prometheus/exporters/systemd.nix
index 0514469b8a6..c0a50f07d71 100644
--- a/nixos/modules/services/monitoring/prometheus/exporters/systemd.nix
+++ b/nixos/modules/services/monitoring/prometheus/exporters/systemd.nix
@@ -13,6 +13,10 @@ in {
         ${pkgs.prometheus-systemd-exporter}/bin/systemd_exporter \
           --web.listen-address ${cfg.listenAddress}:${toString cfg.port}
       '';
+      RestrictAddressFamilies = [
+        # Need AF_UNIX to collect data
+        "AF_UNIX"
+      ];
     };
   };
 }