nixos/gatus: fix missing CAP_NET_RAW (#415877) (#415879)

2025-06-13 17:59:21 +08:00
parent 8fba93d37d 288b6609cb
commit 2054cff512
1 changed files with 4 additions and 0 deletions
@@ -118,6 +118,10 @@ in
        StateDirectory = "gatus";
        SyslogIdentifier = "gatus";
        EnvironmentFile = lib.optional (cfg.environmentFile != null) cfg.environmentFile;
+        # see https://github.com/prometheus-community/pro-bing#linux
+        AmbientCapabilities = "CAP_NET_RAW";
+        CapabilityBoundingSet = "CAP_NET_RAW";
+        NoNewPrivileges = true;
      };

      environment = {